diff --git a/.github/workflows/run-system-tests.yaml b/.github/workflows/run-system-tests.yaml
index f48f6c14fa4..ca9ccadb08d 100644
--- a/.github/workflows/run-system-tests.yaml
+++ b/.github/workflows/run-system-tests.yaml
@@ -62,7 +62,7 @@ jobs:
     needs:
     - build
     # If you change the following comment, update the pattern in the update_system_test_reference.sh script to match.
-    uses: DataDog/system-tests/.github/workflows/system-tests.yml@main # system tests are pinned on release branches only
+    uses: DataDog/system-tests/.github/workflows/system-tests.yml@b935670e7942779f509e0d2e589a3d96f6249ea3 # system tests are pinned on release branches only
     permissions:
       contents: read
       id-token: write
@@ -70,7 +70,7 @@ jobs:
     with:
       library: java
        # If you change the following comment, update the pattern in the update_system_test_reference.sh script to match.
-      ref: "main" # system tests are pinned on release branches only
+      ref: "b935670e7942779f509e0d2e589a3d96f6249ea3" # system tests are pinned on release branches only
       binaries_artifact: binaries
       desired_execution_time: 900  # 15 minutes
       scenarios_groups: tracer-release
diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 939a9025109..9be355a9c7b 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -1045,7 +1045,7 @@ publishing-gate:
 
 configure_system_tests:
   variables:
-    SYSTEM_TESTS_REF: "main" # system tests are pinned on release branches only
+    SYSTEM_TESTS_REF: "b935670e7942779f509e0d2e589a3d96f6249ea3" # system tests are pinned on release branches only
     SYSTEM_TESTS_SCENARIOS_GROUPS: "simple_onboarding,simple_onboarding_profiling,simple_onboarding_appsec,docker-ssi,lib-injection"
 
 create_key: