diff --git a/.github/workflows/openssfscorecard.yml b/.github/workflows/openssfscorecard.yml
index e0c8f0d2..d4f21189 100644
--- a/.github/workflows/openssfscorecard.yml
+++ b/.github/workflows/openssfscorecard.yml
@@ -21,4 +21,4 @@ jobs:
       contents: read
       security-events: write
       id-token: write
-    uses: itiquette/.github/.github/workflows/openssf-scorecard.yml@main
+    uses: itiquette/.github/.github/workflows/openssf-scorecard.yml@906f5ed8735b6948f279513be9608ac578c24209 # main
diff --git a/.github/workflows/pullrequest-workflow.yml b/.github/workflows/pullrequest-workflow.yml
index c70f543e..f59592a0 100644
--- a/.github/workflows/pullrequest-workflow.yml
+++ b/.github/workflows/pullrequest-workflow.yml
@@ -18,16 +18,16 @@ permissions:
 
 jobs:
   commitlint:
-    uses: itiquette/.github/.github/workflows/commit-lint.yml@main
+    uses: itiquette/.github/.github/workflows/commit-lint.yml@906f5ed8735b6948f279513be9608ac578c24209 # main
   dependencyreviewlint:
-    uses: itiquette/.github/.github/workflows/dependency-review.yml@main
+    uses: itiquette/.github/.github/workflows/dependency-review.yml@906f5ed8735b6948f279513be9608ac578c24209 # main
   licenselint:
-    uses: itiquette/.github/.github/workflows/license-lint.yml@main
+    uses: itiquette/.github/.github/workflows/license-lint.yml@906f5ed8735b6948f279513be9608ac578c24209 # main
   misclint:
     permissions:
       contents: read
       security-events: write
-    uses: itiquette/.github/.github/workflows/mega-lint.yml@main
+    uses: itiquette/.github/.github/workflows/mega-lint.yml@906f5ed8735b6948f279513be9608ac578c24209 # main
   golint:
     uses: ./.github/workflows/golint.yml
   test:
diff --git a/.github/workflows/release-workflow.yml b/.github/workflows/release-workflow.yml
index dbc27956..3923e42e 100644
--- a/.github/workflows/release-workflow.yml
+++ b/.github/workflows/release-workflow.yml
@@ -17,7 +17,7 @@ jobs:
     secrets: inherit
     permissions:
       contents: write
-    uses: itiquette/.github/.github/workflows/version-bump-changelog.yml@main
+    uses: itiquette/.github/.github/workflows/version-bump-changelog.yml@906f5ed8735b6948f279513be9608ac578c24209 # main
 
   release:
     needs: [version-bump]