diff --git a/.github/workflows/build-push.yaml b/.github/workflows/build-push.yaml
index 80092e8..70db427 100644
--- a/.github/workflows/build-push.yaml
+++ b/.github/workflows/build-push.yaml
@@ -11,7 +11,7 @@ on:
 
 jobs:
   run:
-    uses: libops/.github/.github/workflows/build-push.yaml@main
+    uses: libops/.github/.github/workflows/build-push.yaml@f39fff4fbd5096221d705143e88e5942f5d9a604 # main
     permissions:
       contents: read
       packages: write
diff --git a/.github/workflows/reusable-goreleaser.yaml b/.github/workflows/reusable-goreleaser.yaml
index 8879cd5..ff269de 100644
--- a/.github/workflows/reusable-goreleaser.yaml
+++ b/.github/workflows/reusable-goreleaser.yaml
@@ -74,7 +74,7 @@ jobs:
           fetch-depth: 0
 
       - name: Set up Go
-        uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417 # v6
+        uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6
         with:
           go-version: ${{ inputs.go-version }}