diff --git a/.github/workflows/release-evidence.yml b/.github/workflows/release-evidence.yml
index d083975..d7d67b7 100644
--- a/.github/workflows/release-evidence.yml
+++ b/.github/workflows/release-evidence.yml
@@ -41,7 +41,7 @@ jobs:
           }
 
       - name: Scan release source and create SBOM
-        uses: SadPossum/GMA-Skeleton/.github/actions/security-baseline@32ec053c78a87f5b5941068eb449e7ae10f51f59
+        uses: SadPossum/GMA-Skeleton/.github/actions/security-baseline@411117c46992d32bf4ec195d4b86125838065756
         with:
           output-directory: artifacts/release-security
           exception-file: .gma/security-exceptions.json
diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml
index 26cfb68..e17c592 100644
--- a/.github/workflows/security.yml
+++ b/.github/workflows/security.yml
@@ -39,7 +39,7 @@ jobs:
         run: ./eng/check-repository-release.ps1
 
       - name: Run repository security baseline
-        uses: SadPossum/GMA-Skeleton/.github/actions/security-baseline@32ec053c78a87f5b5941068eb449e7ae10f51f59
+        uses: SadPossum/GMA-Skeleton/.github/actions/security-baseline@411117c46992d32bf4ec195d4b86125838065756
         with:
           exception-file: .gma/security-exceptions.json