diff --git a/.github/workflows/pr.yaml b/.github/workflows/pr.yaml
index d5cdecd..7fd4394 100644
--- a/.github/workflows/pr.yaml
+++ b/.github/workflows/pr.yaml
@@ -39,7 +39,7 @@ jobs:
         run: ./pw changelog
 
       - name: Check repo status
-        uses: cerbos/actions/check-repo-status@7df6503218a73e5022cc801e99574380474c97dd # main
+        uses: cerbos/actions/check-repo-status@db2ff6efa4315796b92eec00847c9257b89fae5c # main
 
       - name: Test
         env:
diff --git a/.github/workflows/zizmor.yaml b/.github/workflows/zizmor.yaml
index 0bc93c7..983dda2 100644
--- a/.github/workflows/zizmor.yaml
+++ b/.github/workflows/zizmor.yaml
@@ -27,4 +27,4 @@ jobs:
           persist-credentials: false
 
       - name: Run zizmor
-        uses: cerbos/actions/lint-actions@7df6503218a73e5022cc801e99574380474c97dd # main
+        uses: cerbos/actions/lint-actions@db2ff6efa4315796b92eec00847c9257b89fae5c # main