diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index 1ace9b3..0f0cd55 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -20,7 +20,7 @@ jobs:
             runner: "ubuntu-24.04-arm"
             manylinux: "quay.io/pypa/manylinux_2_28_aarch64"
     steps:
-      - uses: "actions/checkout@v4"
+      - uses: "actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd"  # v6.0.2
         with:
           submodules: "recursive"
 
@@ -92,7 +92,7 @@ jobs:
     permissions:
       contents: "write"
     steps:
-      - uses: "actions/checkout@v4"
+      - uses: "actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd"  # v6.0.2
 
       - name: "Download merged artifacts"
         uses: "actions/download-artifact@v4"
@@ -128,7 +128,7 @@ jobs:
             image: "fluent-bit-clp-s3-v2"
             platforms: "linux/amd64,linux/arm64"
     steps:
-      - uses: "actions/checkout@v4"
+      - uses: "actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd"  # v6.0.2
         with:
           submodules: "recursive"
 
diff --git a/.github/workflows/lint.yaml b/.github/workflows/lint.yaml
index 86faf87..8f748e6 100644
--- a/.github/workflows/lint.yaml
+++ b/.github/workflows/lint.yaml
@@ -13,7 +13,7 @@ jobs:
         os: ["ubuntu-latest", "macos-latest"]
     runs-on: "${{ matrix.os }}"
     steps:
-      - uses: "actions/checkout@v4"
+      - uses: "actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd"  # v6.0.2
         with:
           submodules: "recursive"
 
@@ -21,13 +21,11 @@ jobs:
         with:
           go-version: "${{ matrix.go }}"
 
-      - name: "Install task"
-        shell: "bash"
-        run: "npm install -g @go-task/cli"
+      - name: "Install go-task"
+        uses: "./tools/yscope-dev-utils/exports/github/actions/install-go-task"
 
       - name: "Install uv"
-        shell: "bash"
-        run: "curl --fail --location --silent --show-error https://astral.sh/uv/install.sh | sh"
+        uses: "./tools/yscope-dev-utils/exports/github/actions/install-uv"
 
       - name: "Run linting checks"
         run: "task lint:check"
diff --git a/tools/yscope-dev-utils b/tools/yscope-dev-utils
index 82cf408..38bf51e 160000
--- a/tools/yscope-dev-utils
+++ b/tools/yscope-dev-utils
@@ -1 +1 @@
-Subproject commit 82cf40887b0b1c23610f82046d2549314fb4a780
+Subproject commit 38bf51effc500a528c37052345c141a65ea88447