diff --git a/.github/workflows/kics.yml b/.github/workflows/kics.yml
index ca92094..52ea434 100644
--- a/.github/workflows/kics.yml
+++ b/.github/workflows/kics.yml
@@ -14,7 +14,7 @@ jobs:
         name: Check out source code
 
       - name: run a KICS scan
-        uses: checkmarx/kics-github-action@63fca4ca72e56edbb5a599ee756e6af1fdb1e785
+        uses: checkmarx/kics-github-action@05aa5eb70eede1355220f4ca5238d96b397e30a6
         with:
           path: .
           token: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/linters.yml b/.github/workflows/linters.yml
index 99bf30f..4dbf52e 100644
--- a/.github/workflows/linters.yml
+++ b/.github/workflows/linters.yml
@@ -13,7 +13,7 @@ jobs:
     steps:
       - uses: actions/checkout@v6
 
-      - uses: mamba-org/setup-micromamba@4d84239119b14cba1690b971f05c0bab912bea04
+      - uses: mamba-org/setup-micromamba@add3a49764cedee8ee24e82dfde87f5bc2914462
         with:
           micromamba-version: '2.4.0-0'
           environment-file: ci/conda.yml
diff --git a/.github/workflows/molecule.yml b/.github/workflows/molecule.yml
index 2fde508..71db03e 100644
--- a/.github/workflows/molecule.yml
+++ b/.github/workflows/molecule.yml
@@ -16,7 +16,7 @@ jobs:
     steps:
       - name: Get PR files and build role matrix
         id: make-matrix
-        uses: actions/github-script@v8
+        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd
         with:
           script: |
             if (!context.payload.pull_request?.number) {
@@ -64,7 +64,7 @@ jobs:
           fetch-depth: 0
 
       - name: "Set up micromamba"
-        uses: mamba-org/setup-micromamba@4d84239119b14cba1690b971f05c0bab912bea04
+        uses: mamba-org/setup-micromamba@add3a49764cedee8ee24e82dfde87f5bc2914462
         if: ${{ matrix.role != '__no_role__' }}
         with:
           micromamba-version: '2.4.0-0'
diff --git a/roles/caddy/tasks/main.yml b/roles/caddy/tasks/main.yml
index 63a4dad..5d81aa3 100644
--- a/roles/caddy/tasks/main.yml
+++ b/roles/caddy/tasks/main.yml
@@ -3,7 +3,7 @@
   ansible.builtin.user:
     name: caddy
     comment: "Caddy web server"
-    shell: /bin/nologin
+    shell: /sbin/nologin
     home: /var/lib/caddy
     state: present
     system: true
@@ -80,3 +80,12 @@
     owner: root
     group: root
     mode: "0644"
+
+- name: "Create a directory for Caddy logs"
+  when: caddy_log_path is defined
+  ansible.builtin.file:
+    state: directory
+    path: "{{ caddy_log_path }}"
+    owner: caddy
+    group: caddy
+    mode: "0755"