diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index e9b9105..d17b25b 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -19,7 +19,7 @@ permissions:
 
 jobs:
   test:
-    uses: rishitank/.github/.github/workflows/node-ci.yml@v1
+    uses: rishitank/.github/.github/workflows/node-ci.yml@5c644123ed93759cf78aa32d9d119150910e113e # v1
     with:
       lint: ""
       typecheck: ""
diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml
index 6a603b0..dc3945b 100644
--- a/.github/workflows/security.yml
+++ b/.github/workflows/security.yml
@@ -19,7 +19,7 @@ permissions:
 
 jobs:
   security:
-    uses: rishitank/.github/.github/workflows/security.yml@v1
+    uses: rishitank/.github/.github/workflows/security.yml@5c644123ed93759cf78aa32d9d119150910e113e # v1
     with:
       ecosystem: node
       # osv-scanner scans package-lock.json; the audit's setup-node reads
diff --git a/.github/workflows/workflows-lint.yml b/.github/workflows/workflows-lint.yml
index f927d2f..bcba506 100644
--- a/.github/workflows/workflows-lint.yml
+++ b/.github/workflows/workflows-lint.yml
@@ -15,4 +15,4 @@ permissions:
 
 jobs:
   actionlint:
-    uses: rishitank/.github/.github/workflows/workflows-lint.yml@v1
+    uses: rishitank/.github/.github/workflows/workflows-lint.yml@5c644123ed93759cf78aa32d9d119150910e113e # v1