diff --git a/.github/workflows/l9-governance.yml b/.github/workflows/l9-governance.yml
index 43c77b6..57fc2f4 100644
--- a/.github/workflows/l9-governance.yml
+++ b/.github/workflows/l9-governance.yml
@@ -7,6 +7,6 @@ on:
 
 jobs:
   l9_governance:
-    uses: Quantum-L9/l9-ci-core/.github/workflows/trio-governance.yml@v2
+    uses: Quantum-L9/l9-ci-core/.github/workflows/trio-governance.yml@450f6ec753435365c6e4212cc898ee9ba560bb7d # v2
     with:
       src-directory: "src"
diff --git a/.github/workflows/l9-pre-commit.yml b/.github/workflows/l9-pre-commit.yml
index 861f0c9..1ec7899 100644
--- a/.github/workflows/l9-pre-commit.yml
+++ b/.github/workflows/l9-pre-commit.yml
@@ -7,6 +7,6 @@ on:
 
 jobs:
   l9_pre_commit:
-    uses: Quantum-L9/l9-ci-core/.github/workflows/pre-commit-ci.yml@v2
+    uses: Quantum-L9/l9-ci-core/.github/workflows/pre-commit-ci.yml@450f6ec753435365c6e4212cc898ee9ba560bb7d # v2
     with:
       python-version: "3.12"
diff --git a/.github/workflows/l9-sbom.yml b/.github/workflows/l9-sbom.yml
index 6b1449c..54cfef7 100644
--- a/.github/workflows/l9-sbom.yml
+++ b/.github/workflows/l9-sbom.yml
@@ -7,4 +7,4 @@ on:
 
 jobs:
   l9_sbom:
-    uses: Quantum-L9/l9-ci-core/.github/workflows/sbom.yml@v2
+    uses: Quantum-L9/l9-ci-core/.github/workflows/sbom.yml@450f6ec753435365c6e4212cc898ee9ba560bb7d # v2
diff --git a/.github/workflows/l9-scorecard.yml b/.github/workflows/l9-scorecard.yml
index 749f0cd..96c8687 100644
--- a/.github/workflows/l9-scorecard.yml
+++ b/.github/workflows/l9-scorecard.yml
@@ -10,4 +10,4 @@ on:
 
 jobs:
   l9_scorecard:
-    uses: Quantum-L9/l9-ci-core/.github/workflows/scorecard.yml@v2
+    uses: Quantum-L9/l9-ci-core/.github/workflows/scorecard.yml@450f6ec753435365c6e4212cc898ee9ba560bb7d # v2
diff --git a/.github/workflows/l9-security.yml b/.github/workflows/l9-security.yml
index 71e096d..2f0bd18 100644
--- a/.github/workflows/l9-security.yml
+++ b/.github/workflows/l9-security.yml
@@ -9,7 +9,7 @@ on:
 
 jobs:
   l9_security:
-    uses: Quantum-L9/l9-ci-core/.github/workflows/security.yml@v2
+    uses: Quantum-L9/l9-ci-core/.github/workflows/security.yml@450f6ec753435365c6e4212cc898ee9ba560bb7d # v2
     with:
       python-version: "3.12"
       run-npm-audit: false