diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index c486b58..6691ae2 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -48,7 +48,7 @@ jobs:
           sudo apt-get update
           sudo apt-get install -y qemu-user-static binfmt-support
           sudo update-binfmts --display
-      - uses: earthbuild/actions-setup@main
+      - uses: earthbuild/actions-setup@c9d6832a530022f94246d1913acc69cecde9029f # main
 
       - name: Log in to GitHub Container Registry (non fork only)
         run: echo "${{ secrets.GITHUB_TOKEN }}" | docker login ghcr.io -u ${{ github.actor }} --password-stdin
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index f1942dc..78b4874 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -34,7 +34,7 @@ jobs:
           sudo apt-get update
           sudo apt-get install -y qemu-user-static binfmt-support
           sudo update-binfmts --display
-      - uses: earthbuild/actions-setup@main
+      - uses: earthbuild/actions-setup@c9d6832a530022f94246d1913acc69cecde9029f # main
 
       - name: Log in to container registries (non fork only)
         run: |-