diff --git a/.github/workflows/linux.yml b/.github/workflows/linux.yml
index bcaab75dc8..469b714d35 100644
--- a/.github/workflows/linux.yml
+++ b/.github/workflows/linux.yml
@@ -204,7 +204,7 @@ jobs:
     name: ${{ matrix.type }}-build-release
     runs-on: ubuntu-latest
     container:
-      image: ubuntu:16.04
+      image: ubuntu:18.04
     strategy:
       matrix:
         type: [apps, apps-x86, apps-arm64]
@@ -234,7 +234,7 @@ jobs:
         run: |
           apt-get install -y gcc-aarch64-linux-gnu g++-aarch64-linux-gnu binutils-aarch64-linux-gnu wget ca-certificates
 
-      - uses: actions/checkout@v3 # ignore-check
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
         with:
           fetch-depth: 2
 
@@ -279,7 +279,7 @@ jobs:
 
       - name: Upload logs on failure
         if: ${{ failure() }}
-        uses: actions/upload-artifact@v3 # ignore-check
+        uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882
         with:
           name: linux_release_logs_${{ matrix.type }}_${{ github.event.pull_request.head.sha }}
           path: deploy/logs.7z
@@ -289,7 +289,7 @@ jobs:
         run: python3 ./deploy/prepare_deployment.py linux_apps
 
       - name: Upload wrapper artifacts
-        uses: actions/upload-artifact@v3 # ignore-check
+        uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882
         if: success()
         with:
           name: linux_release_${{ matrix.type }}_${{ github.event.pull_request.head.sha }}