diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 877b365..b5c8ac1 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -25,5 +25,5 @@ jobs:
       actions: read
       contents: read
       security-events: write
-    uses: OriginAS/origin-actions/.github/workflows/codeql.yml@main
+    uses: OriginAS/origin-actions/.github/workflows/codeql.yml@f72ac0ab464a0462cef5cd7eca7f562206c26edf # main
     secrets: inherit
diff --git a/.github/workflows/dependabot-assign.yml b/.github/workflows/dependabot-assign.yml
index 91fd636..af9009e 100644
--- a/.github/workflows/dependabot-assign.yml
+++ b/.github/workflows/dependabot-assign.yml
@@ -18,7 +18,7 @@ jobs:
       contents: read        # read the commit history
       issues: write         # add assignees (PRs are issues in the API)
       pull-requests: write  # request reviewers
-    uses: OriginAS/origin-actions/.github/workflows/dependabot-assign.yml@main
+    uses: OriginAS/origin-actions/.github/workflows/dependabot-assign.yml@f72ac0ab464a0462cef5cd7eca7f562206c26edf # main
     with:
       count: 2
       days: 90