diff --git a/.github/workflows/bump-release.yml b/.github/workflows/bump-release.yml
index f476da6..3f65817 100644
--- a/.github/workflows/bump-release.yml
+++ b/.github/workflows/bump-release.yml
@@ -58,7 +58,7 @@ jobs:
           fetch-depth: 0
       -
         name: install svu
-        uses: go-openapi/gh-actions/install/svu@00fc74b63fc83dd6031018ecbeac387ca9131fe2 # v0.1.0
+        uses: go-openapi/gh-actions/install/svu@3983df5e4a081b07ed17723b86610d306f40021e # v1.0.0
       -
         name: Bump release
         id: bump-release
diff --git a/.github/workflows/collect-reports.yml b/.github/workflows/collect-reports.yml
index 1d7b9ca..2e2dd43 100644
--- a/.github/workflows/collect-reports.yml
+++ b/.github/workflows/collect-reports.yml
@@ -32,7 +32,7 @@ jobs:
           path: reports/
       -
         name: Install go-junit-report
-        uses: go-openapi/gh-actions/install/go-junit-report@2c8f8152814933c4cead92a51558699238ee9565
+        uses: go-openapi/gh-actions/install/go-junit-report@3983df5e4a081b07ed17723b86610d306f40021e # v1.0.0
       -
         name: Convert test reports to a merged JUnit XML
         # NOTE: codecov test reports only support JUnit format at this moment. See https://docs.codecov.com/docs/test-analytics.
@@ -57,7 +57,7 @@ jobs:
           verbose: true
       -
         name: Install go-ctrf-json-reporter
-        uses: go-openapi/gh-actions/install/go-ctrf-json-reporter@2c8f8152814933c4cead92a51558699238ee9565
+        uses: go-openapi/gh-actions/install/go-ctrf-json-reporter@3983df5e4a081b07ed17723b86610d306f40021e # v1.0.0
       -
         name: Convert test reports to CTRF JSON
         # description: |
diff --git a/.github/workflows/go-test.yml b/.github/workflows/go-test.yml
index 1827a83..4acb8f4 100644
--- a/.github/workflows/go-test.yml
+++ b/.github/workflows/go-test.yml
@@ -53,7 +53,7 @@ jobs:
           cache: true
       -
         name: Install gotestsum
-        uses: go-openapi/gh-actions/install/gotestsum@2c8f8152814933c4cead92a51558699238ee9565
+        uses: go-openapi/gh-actions/install/gotestsum@3983df5e4a081b07ed17723b86610d306f40021e # v1.0.0
       -
         name: Run unit tests
         run: >