diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 33c7d9c..8289bbd 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -8,13 +8,13 @@ on:
   pull_request:
 jobs:
   yamllint:
-    uses: dropwizard/workflows/.github/workflows/yamllint.yml@main
+    uses: dropwizard/workflows/.github/workflows/yamllint.yml@6458e8a6570531e6c5a4f5cac42ae2ed0718956b # main
   build:
     strategy:
       fail-fast: false
       matrix:
         java-version: ['17', '21']
-    uses: dropwizard/workflows/.github/workflows/maven.yml@main
+    uses: dropwizard/workflows/.github/workflows/maven.yml@6458e8a6570531e6c5a4f5cac42ae2ed0718956b # main
     secrets: inherit
     with:
       java-version: ${{ matrix.java-version }}
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 0ece1a1..773fd79 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -7,5 +7,5 @@ on:
       - v*
 jobs:
   release:
-    uses: dropwizard/workflows/.github/workflows/release.yml@main
+    uses: dropwizard/workflows/.github/workflows/release.yml@6458e8a6570531e6c5a4f5cac42ae2ed0718956b # main
     secrets: inherit
diff --git a/.github/workflows/trigger-release.yml b/.github/workflows/trigger-release.yml
index 454d437..fc0047d 100644
--- a/.github/workflows/trigger-release.yml
+++ b/.github/workflows/trigger-release.yml
@@ -15,7 +15,7 @@ on:
         type: string
 jobs:
   release:
-    uses: dropwizard/workflows/.github/workflows/trigger-release.yml@main
+    uses: dropwizard/workflows/.github/workflows/trigger-release.yml@6458e8a6570531e6c5a4f5cac42ae2ed0718956b # main
     secrets: inherit
     with:
       releaseVersion: ${{ inputs.releaseVersion }}