diff --git a/.github/workflows/openssfscorecard.yml b/.github/workflows/openssfscorecard.yml
index e0c8f0d2..7d705acc 100644
--- a/.github/workflows/openssfscorecard.yml
+++ b/.github/workflows/openssfscorecard.yml
@@ -21,4 +21,4 @@ jobs:
       contents: read
       security-events: write
       id-token: write
-    uses: itiquette/.github/.github/workflows/openssf-scorecard.yml@main
+    uses: itiquette/.github/.github/workflows/openssf-scorecard.yml@16c2f373d50c8a077624a67947dcd342f6eeae29 # main
diff --git a/.github/workflows/pullrequest-workflow.yml b/.github/workflows/pullrequest-workflow.yml
index c70f543e..7e506d31 100644
--- a/.github/workflows/pullrequest-workflow.yml
+++ b/.github/workflows/pullrequest-workflow.yml
@@ -18,16 +18,16 @@ permissions:
 
 jobs:
   commitlint:
-    uses: itiquette/.github/.github/workflows/commit-lint.yml@main
+    uses: itiquette/.github/.github/workflows/commit-lint.yml@16c2f373d50c8a077624a67947dcd342f6eeae29 # main
   dependencyreviewlint:
-    uses: itiquette/.github/.github/workflows/dependency-review.yml@main
+    uses: itiquette/.github/.github/workflows/dependency-review.yml@16c2f373d50c8a077624a67947dcd342f6eeae29 # main
   licenselint:
-    uses: itiquette/.github/.github/workflows/license-lint.yml@main
+    uses: itiquette/.github/.github/workflows/license-lint.yml@16c2f373d50c8a077624a67947dcd342f6eeae29 # main
   misclint:
     permissions:
       contents: read
       security-events: write
-    uses: itiquette/.github/.github/workflows/mega-lint.yml@main
+    uses: itiquette/.github/.github/workflows/mega-lint.yml@16c2f373d50c8a077624a67947dcd342f6eeae29 # main
   golint:
     uses: ./.github/workflows/golint.yml
   test:
diff --git a/.github/workflows/release-workflow.yml b/.github/workflows/release-workflow.yml
index dbc27956..ae2db4ad 100644
--- a/.github/workflows/release-workflow.yml
+++ b/.github/workflows/release-workflow.yml
@@ -17,7 +17,7 @@ jobs:
     secrets: inherit
     permissions:
       contents: write
-    uses: itiquette/.github/.github/workflows/version-bump-changelog.yml@main
+    uses: itiquette/.github/.github/workflows/version-bump-changelog.yml@16c2f373d50c8a077624a67947dcd342f6eeae29 # main
 
   release:
     needs: [version-bump]