diff --git a/.github/workflows/pr.yaml b/.github/workflows/pr.yaml
index 1335ea2..10427fc 100644
--- a/.github/workflows/pr.yaml
+++ b/.github/workflows/pr.yaml
@@ -39,7 +39,7 @@ jobs:
         run: ./pw changelog
 
       - name: Check repo status
-        uses: cerbos/actions/check-repo-status@025d2a858c99b1e9c062351376d0b42988c5e52c # main
+        uses: cerbos/actions/check-repo-status@46d5ebb4863c5923349d640fdf918185ec951a09 # main
 
       - name: Test
         env:
diff --git a/.github/workflows/zizmor.yaml b/.github/workflows/zizmor.yaml
index 720e18b..66f30fc 100644
--- a/.github/workflows/zizmor.yaml
+++ b/.github/workflows/zizmor.yaml
@@ -27,4 +27,4 @@ jobs:
           persist-credentials: false
 
       - name: Run zizmor
-        uses: cerbos/actions/lint-actions@025d2a858c99b1e9c062351376d0b42988c5e52c # main
+        uses: cerbos/actions/lint-actions@46d5ebb4863c5923349d640fdf918185ec951a09 # main