diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 625b28a..b082f63 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -48,7 +48,7 @@ jobs:
           sudo apt-get update
           sudo apt-get install -y qemu-user-static binfmt-support
           sudo update-binfmts --display
-      - uses: earthbuild/actions-setup@main
+      - uses: earthbuild/actions-setup@8e723dffa73c48943556e4d7ece219d508b0f584 # main
         with:
           version: v0.8.15
       - name: Log in to GitHub Container Registry (non fork only)
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 6e44048..fe2771b 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -34,7 +34,7 @@ jobs:
           sudo apt-get update
           sudo apt-get install -y qemu-user-static binfmt-support
           sudo update-binfmts --display
-      - uses: earthbuild/actions-setup@main
+      - uses: earthbuild/actions-setup@8e723dffa73c48943556e4d7ece219d508b0f584 # main
         with:
           version: v0.8.15
       - name: Log in to container registries (non fork only)