diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 9b92038ce96..a8616936726 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -46,7 +46,7 @@ jobs:
         persist-credentials: true # The release action pushes the version commit and tag.
 
     - name: 'Publish action'
-      uses: firebolt-db/action-python-release@535d72bf4fb7ff9ff7f87bb0454e232afe1cef91 # main
+      uses: firebolt-db/action-python-release@4df4861ff745d6e2bbc602b2e8d6578d4f8dcf61 # v1.0.0
       with:
         pre-release-tag: ${{ inputs.pre-release-tag }}
         major-release: ${{ inputs.major-release }}
diff --git a/.github/workflows/security-scan.yml b/.github/workflows/security-scan.yml
index 8ce4ea1dcff..336a18ddce6 100644
--- a/.github/workflows/security-scan.yml
+++ b/.github/workflows/security-scan.yml
@@ -29,7 +29,7 @@ jobs:
           name: pytest-coverage-report
 
       - name: "Security Scan"
-        uses: firebolt-db/action-security-scan@83d65487985b5e0e967362900c665ced1e8d0dbf # main
+        uses: firebolt-db/action-security-scan@43e78eff2e3313515c49b6c710ea0ae8a0bfb86a # v1.0.0
         with:
           github-key: ${{ secrets.GITHUB_TOKEN }}
           fossa-key: ${{ secrets.FOSSA_TOKEN }}