diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index d45b1c266..28d15f792 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -15,11 +15,11 @@ jobs:
                 os: [ ubuntu-latest, windows-latest, macos-latest ]
         runs-on: ${{ matrix.os }}
         steps:
-            -   uses: actions/checkout@v7
+            -   uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
                 with:
                     fetch-depth: 0
             -   name: Setup .NET SDKs
-                uses: actions/setup-dotnet@v6
+                uses: actions/setup-dotnet@a98b56852c35b8e3190ac28c8c2271da59106c68 # v6
                 with:
                     dotnet-version: |
                         6.0.x
@@ -34,7 +34,7 @@ jobs:
                 run: ./build.sh CodeCoverage
             -   name: Upload artifacts
                 if: always()
-                uses: actions/upload-artifact@v4
+                uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
                 with:
                     name: ${{ runner.os }}-artifacts
                     path: |
@@ -47,11 +47,11 @@ jobs:
         env:
             DOTNET_NOLOGO: true
         steps:
-            -   uses: actions/checkout@v7
+            -   uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
                 with:
                     fetch-depth: 0
             -   name: Setup .NET SDKs
-                uses: actions/setup-dotnet@v6
+                uses: actions/setup-dotnet@a98b56852c35b8e3190ac28c8c2271da59106c68 # v6
                 with:
                     dotnet-version: |
                         6.0.x
@@ -62,7 +62,7 @@ jobs:
                 run: ./build.sh ApiChecks
             -   name: Upload artifacts
                 if: always()
-                uses: actions/upload-artifact@v4
+                uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
                 with:
                     name: API-tests
                     path: |
@@ -77,11 +77,11 @@ jobs:
             SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
             DOTNET_NOLOGO: true
         steps:
-            -   uses: actions/checkout@v7
+            -   uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
                 with:
                     fetch-depth: 0
             -   name: Setup .NET SDKs
-                uses: actions/setup-dotnet@v6
+                uses: actions/setup-dotnet@a98b56852c35b8e3190ac28c8c2271da59106c68 # v6
                 with:
                     dotnet-version: |
                         6.0.x
@@ -101,11 +101,11 @@ jobs:
         if: always()
         steps:
             -   name: Download Artifacts
-                uses: actions/download-artifact@v4
+                uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
                 with:
                     path: artifacts
             -   name: Publish Test Results
-                uses: EnricoMi/publish-unit-test-result-action@v2
+                uses: EnricoMi/publish-unit-test-result-action@d0a4676d0e0b938bc201470d88276b7c74c712b3 # v2
                 with:
                     comment_mode: always
                     files: "artifacts/**/**/*.trx"
@@ -117,11 +117,11 @@ jobs:
         env:
             DOTNET_NOLOGO: true
         steps:
-            -   uses: actions/checkout@v7
+            -   uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
                 with:
                     fetch-depth: 0
             -   name: Setup .NET SDKs
-                uses: actions/setup-dotnet@v6
+                uses: actions/setup-dotnet@a98b56852c35b8e3190ac28c8c2271da59106c68 # v6
                 with:
                     dotnet-version: |
                         6.0.x
@@ -132,7 +132,7 @@ jobs:
                 run: ./build.sh Pack
             -   name: Upload packages
                 if: always()
-                uses: actions/upload-artifact@v4
+                uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
                 with:
                     path: Artifacts/Packages
                     name: Packages
@@ -148,15 +148,15 @@ jobs:
             id-token: write
         steps:
             -   name: Download packages
-                uses: actions/download-artifact@v4
+                uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
                 with:
                     name: Packages
                     path: Artifacts/Packages
             -   name: Setup .NET SDKs
-                uses: actions/setup-dotnet@v6
+                uses: actions/setup-dotnet@a98b56852c35b8e3190ac28c8c2271da59106c68 # v6
             -   name: NuGet login
                 id: login
-                uses: NuGet/login@v1
+                uses: NuGet/login@8d196754b4036150537f80ac539e15c2f1028841 # v1
                 with:
                     user: ${{ secrets.NUGET_USER }}
             -   name: Publish
@@ -183,15 +183,15 @@ jobs:
             id-token: write
         steps:
             -   name: Download packages
-                uses: actions/download-artifact@v4
+                uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
                 with:
                     name: Packages
                     path: Artifacts/Packages
             -   name: Setup .NET SDKs
-                uses: actions/setup-dotnet@v6
+                uses: actions/setup-dotnet@a98b56852c35b8e3190ac28c8c2271da59106c68 # v6
             -   name: NuGet login
                 id: login
-                uses: NuGet/login@v1
+                uses: NuGet/login@8d196754b4036150537f80ac539e15c2f1028841 # v1
                 with:
                     user: ${{ secrets.NUGET_USER }}
             -   name: Publish
@@ -215,7 +215,7 @@ jobs:
             -   name: Create GitHub release
                 if: steps.check-pre-release.outputs.release == 'true'
                 continue-on-error: true
-                uses: softprops/action-gh-release@v3
+                uses: softprops/action-gh-release@efb35369e0ad2afab669f228072c1b0d510eae64 # v3
                 with:
                     name: ${{ steps.tag.outputs.release_version }}
                     tag_name: ${{ steps.tag.outputs.release_version }}
@@ -241,7 +241,7 @@ jobs:
             -   name: Comment relevant issues and pull requests
                 if: steps.check-pre-release.outputs.release == 'true'
                 continue-on-error: true
-                uses: apexskier/github-release-commenter@v1.4.1
+                uses: apexskier/github-release-commenter@e7813a9625eabd79a875b4bc4046cfcae377ab34 # v1.4.1
                 with:
                     GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
                     comment-template: |
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index a79b5c988..b36c8fe43 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -14,11 +14,11 @@ jobs:
                 os: [ ubuntu-latest, windows-latest, macos-latest ]
         runs-on: ${{ matrix.os }}
         steps:
-            -   uses: actions/checkout@v7
+            -   uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
                 with:
                     fetch-depth: 0
             -   name: Setup .NET SDKs
-                uses: actions/setup-dotnet@v6
+                uses: actions/setup-dotnet@a98b56852c35b8e3190ac28c8c2271da59106c68 # v6
                 with:
                     dotnet-version: |
                         6.0.x
@@ -33,7 +33,7 @@ jobs:
                 run: ./build.sh CodeCoverage
             -   name: Upload artifacts
                 if: always()
-                uses: actions/upload-artifact@v4
+                uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
                 with:
                     name: ${{ runner.os }}-artifacts
                     path: |
@@ -46,11 +46,11 @@ jobs:
         env:
             DOTNET_NOLOGO: true
         steps:
-            -   uses: actions/checkout@v7
+            -   uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
                 with:
                     fetch-depth: 0
             -   name: Setup .NET SDKs
-                uses: actions/setup-dotnet@v6
+                uses: actions/setup-dotnet@a98b56852c35b8e3190ac28c8c2271da59106c68 # v6
                 with:
                     dotnet-version: |
                         6.0.x
@@ -61,7 +61,7 @@ jobs:
                 run: ./build.sh ApiChecks
             -   name: Upload artifacts
                 if: always()
-                uses: actions/upload-artifact@v4
+                uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
                 with:
                     name: API-tests
                     path: |
@@ -78,11 +78,11 @@ jobs:
         permissions:
             pull-requests: write
         steps:
-            -   uses: actions/checkout@v7
+            -   uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
                 with:
                     fetch-depth: 0
             -   name: Setup .NET SDKs
-                uses: actions/setup-dotnet@v6
+                uses: actions/setup-dotnet@a98b56852c35b8e3190ac28c8c2271da59106c68 # v6
                 with:
                     dotnet-version: |
                         6.0.x
@@ -104,11 +104,11 @@ jobs:
         permissions:
             pull-requests: write
         steps:
-            -   uses: actions/checkout@v7
+            -   uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
                 with:
                     fetch-depth: 0
             -   name: Setup .NET SDKs
-                uses: actions/setup-dotnet@v6
+                uses: actions/setup-dotnet@a98b56852c35b8e3190ac28c8c2271da59106c68 # v6
                 with:
                     dotnet-version: |
                         6.0.x
@@ -129,11 +129,11 @@ jobs:
             SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
             DOTNET_NOLOGO: true
         steps:
-            -   uses: actions/checkout@v7
+            -   uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
                 with:
                     fetch-depth: 0
             -   name: Setup .NET SDKs
-                uses: actions/setup-dotnet@v6
+                uses: actions/setup-dotnet@a98b56852c35b8e3190ac28c8c2271da59106c68 # v6
                 with:
                     dotnet-version: |
                         6.0.x
@@ -153,11 +153,11 @@ jobs:
         if: always()
         steps:
             -   name: Download Artifacts
-                uses: actions/download-artifact@v4
+                uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
                 with:
                     path: artifacts
             -   name: Publish Test Results
-                uses: EnricoMi/publish-unit-test-result-action@v2
+                uses: EnricoMi/publish-unit-test-result-action@d0a4676d0e0b938bc201470d88276b7c74c712b3 # v2
                 with:
                     comment_mode: always
                     files: "artifacts/**/**/*.trx"
diff --git a/.github/workflows/notify-docs-site.yml b/.github/workflows/notify-docs-site.yml
index 147981ab7..bbe22a24c 100644
--- a/.github/workflows/notify-docs-site.yml
+++ b/.github/workflows/notify-docs-site.yml
@@ -14,7 +14,7 @@ jobs:
         runs-on: ubuntu-latest
         steps:
             -   name: Dispatch extension-documentation-updated-event to Testably/Testably.Site
-                uses: peter-evans/repository-dispatch@v4
+                uses: peter-evans/repository-dispatch@28959ce8df70de7be546dd1250a005dd32156697 # v4
                 with:
                     token: ${{ secrets.SITE_DISPATCH_TOKEN }}
                     repository: Testably/Testably.Site
diff --git a/Tests/Testably.Abstractions.Testing.Tests/Storage/InMemoryContainerTests.cs b/Tests/Testably.Abstractions.Testing.Tests/Storage/InMemoryContainerTests.cs
index f7efdf297..d4374bc99 100644
--- a/Tests/Testably.Abstractions.Testing.Tests/Storage/InMemoryContainerTests.cs
+++ b/Tests/Testably.Abstractions.Testing.Tests/Storage/InMemoryContainerTests.cs
@@ -287,9 +287,7 @@ public async Task ToString_Directory_ShouldIncludePath()
 		MockFileSystem fileSystem = new();
 		string expectedPath = fileSystem.Path.GetFullPath("foo");
 		fileSystem.Directory.CreateDirectory(expectedPath);
-		#pragma warning disable CA1826
-		IStorageContainer sut = fileSystem.StorageContainers.Last();
-		#pragma warning restore CA1826
+		IStorageContainer sut = fileSystem.StorageContainers[fileSystem.StorageContainers.Count - 1];
 
 		string? result = sut.ToString();