diff --git a/.github/actions/save-logs/action.yaml b/.github/actions/save-logs/action.yaml
index fbb3bfce..82e23aee 100644
--- a/.github/actions/save-logs/action.yaml
+++ b/.github/actions/save-logs/action.yaml
@@ -1,6 +1,12 @@
 name: save-logs
 description: "Save debug logs"
 
+inputs:
+  suffix:
+    description: 'Suffix to append to the debug log'
+    required: false
+    default: ''
+
 runs:
   using: composite
   steps:
@@ -10,9 +16,9 @@ runs:
         sudo chown $USER /tmp/uds-*.log || echo ""
       shell: bash
 
-    - uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3
+    - uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1
       with:
-        name: debug-log
+        name: debug-log${{ inputs.suffix }}
         path: |
           /tmp/zarf-*.log
           /tmp/uds-*.log
diff --git a/.github/actions/setup/action.yaml b/.github/actions/setup/action.yaml
index 456e55ec..a6f1170e 100644
--- a/.github/actions/setup/action.yaml
+++ b/.github/actions/setup/action.yaml
@@ -16,7 +16,7 @@ runs:
   using: "composite"
   steps:
     - name: Use Node.js latest
-      uses: actions/setup-node@8f152de45cc393bb48ce5d89d36b731f54556e65 # v4.0.0
+      uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4.0.2
       with:
         node-version: 20
 
@@ -33,14 +33,14 @@ runs:
       run: brew install defenseunicorns/tap/uds@0.8.1
 
     - name: Login to GHCR
-      uses: docker/login-action@v3
+      uses: docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d # v3
       with:
         registry: ghcr.io
         username: dummy
         password: ${{ inputs.gh_token }}
 
     - name: Login to registry1
-      uses: docker/login-action@v3
+      uses: docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d # v3
       with:
         registry: registry1.dso.mil
         username: ${{ inputs.ib_user }}
diff --git a/.github/workflows/commitlint.yaml b/.github/workflows/commitlint.yaml
index 09fadf87..d28f3813 100644
--- a/.github/workflows/commitlint.yaml
+++ b/.github/workflows/commitlint.yaml
@@ -19,7 +19,7 @@ jobs:
           fetch-depth: 0
 
       - name: Setup Node.js
-        uses: actions/setup-node@8f152de45cc393bb48ce5d89d36b731f54556e65 # v4.0.0
+        uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4.0.2
 
       - name: Install commitlint
         run: npm install --save-dev @commitlint/{config-conventional,cli}
diff --git a/.github/workflows/pull-request-conditionals.yaml b/.github/workflows/pull-request-conditionals.yaml
index ade17b10..6176a758 100644
--- a/.github/workflows/pull-request-conditionals.yaml
+++ b/.github/workflows/pull-request-conditionals.yaml
@@ -24,9 +24,9 @@ jobs:
   lint-check:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
       - name: Use Node.js latest
-        uses: actions/setup-node@8f152de45cc393bb48ce5d89d36b731f54556e65 # v4.0.0
+        uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4.0.2
         with:
           node-version: 20
       - name: Set up Homebrew
diff --git a/.github/workflows/tag-and-release.yml b/.github/workflows/tag-and-release.yml
index 3b4a32ad..0cc3ed6e 100644
--- a/.github/workflows/tag-and-release.yml
+++ b/.github/workflows/tag-and-release.yml
@@ -15,7 +15,7 @@ jobs:
     steps:
       - name: Create release tag
         id: tag
-        uses: google-github-actions/release-please-action@v3
+        uses: google-github-actions/release-please-action@cc61a07e2da466bebbc19b3a7dd01d6aecb20d1e # v4
         with:
           command: manifest # use configs in release-please-config.json
       - id: release-flag
@@ -54,3 +54,5 @@ jobs:
       - name: Save logs
         if: always()
         uses: ./.github/actions/save-logs
+        with:
+          suffix: -${{ matrix.flavor }}
diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml
index a700587b..e4e91995 100644
--- a/.github/workflows/test.yaml
+++ b/.github/workflows/test.yaml
@@ -84,3 +84,5 @@ jobs:
       - name: Save logs
         if: always()
         uses: ./.github/actions/save-logs
+        with:
+          suffix: -${{ inputs.test_type }}-${{ inputs.package }}-${{ inputs.flavor }}