diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index df91839..b589d5e 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -11,7 +11,7 @@ jobs:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
 
       - name: Set up Go
-        uses: actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c # v6
+        uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6
         with:
           go-version: ">=1.26.2"
 
@@ -48,7 +48,7 @@ jobs:
 
   push-images:
     needs: [ lint-test ]
-    uses: libops/.github/.github/workflows/build-push.yaml@main
+    uses: libops/.github/.github/workflows/build-push.yaml@f39fff4fbd5096221d705143e88e5942f5d9a604 # main
     permissions:
       contents: read
       packages: write