diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index a31902d..4a1fb62 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -1,7 +1,7 @@
 repos:
   # lint yaml, line and whitespace
   - repo: https://github.com/pre-commit/pre-commit-hooks
-    rev: v5.0.0
+    rev: cef0300fd0fc4d2a87a85fa2093c6b283ea36f4b  # frozen: v5.0.0
     hooks:
       - id: check-yaml
       - id: end-of-file-fixer
@@ -13,13 +13,13 @@ repos:
 
   # lint the dockerfiles
   - repo: https://github.com/hadolint/hadolint
-    rev: v2.13.1-beta
+    rev: c3dc18df7a501f02a560a2cc7ba3c69a85ca01d3  # frozen: v2.13.1-beta
     hooks:
       - id: hadolint
 
   # prettier
   - repo: https://github.com/pre-commit/mirrors-prettier
-    rev: "v4.0.0-alpha.8" # Use the sha / tag you want to point at
+    rev: "f12edd9c7be1c20cfa42420fd0e6df71e42b51ea"  # frozen: v4.0.0-alpha.8
     hooks:
       - id: prettier
         types_or: [file, bash, sh, javascript, jsx, ts, tsx]
@@ -28,7 +28,7 @@ repos:
         exclude: ^(Dockerfile*)
 
   - repo: https://github.com/codespell-project/codespell.git
-    rev: "v2.4.1" # Use the sha / tag you want to point at
+    rev: "63c8f8312b7559622c0d82815639671ae42132ac"  # frozen: v2.4.1
     hooks:
       - id: codespell
         types: [text]
@@ -36,30 +36,30 @@ repos:
         exclude: ^(Dockerfile*)
 
   - repo: https://github.com/shellcheck-py/shellcheck-py
-    rev: v0.10.0.1
+    rev: a23f6b85d0fdd5bb9d564e2579e678033debbdff  # frozen: v0.10.0.1
     hooks:
       - id: shellcheck
 
   - repo: https://github.com/sirosen/check-jsonschema
-    rev: 0.31.1
+    rev: a20fe80ebdd4aec6791598c9ff559985580f91ea  # frozen: 0.31.1
     hooks:
       - id: check-github-actions
       - id: check-github-workflows
 
   - repo: https://github.com/doublify/pre-commit-rust
-    rev: v1.0
+    rev: eeee35a89e69d5772bdee97db1a6a898467b686e  # frozen: v1.0
     hooks:
       - id: fmt
       - id: cargo-check
 
     # lint python formatting
   - repo: https://github.com/psf/black
-    rev: 25.1.0
+    rev: 8a737e727ac5ab2f1d4cf5876720ed276dc8dc4b  # frozen: 25.1.0
     hooks:
       - id: black
 
   - repo: https://github.com/pycqa/flake8
-    rev: "7.1.1" # pick a git hash / tag to point to
+    rev: "e43806be3607110919eff72939fda031776e885a"  # frozen: 7.1.1
     hooks:
       - id: flake8
         args: ["--extend-ignore=W503,W504,E501"]