diff --git a/.github/workflows/_code-quality.yml b/.github/workflows/_code-quality.yml
index b04d28f..872fe23 100644
--- a/.github/workflows/_code-quality.yml
+++ b/.github/workflows/_code-quality.yml
@@ -9,7 +9,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
-      - uses: technology-studio/github-workflows/.github/actions/install-dependencies@main
+      - uses: technology-studio/github-workflows/.github/actions/install-dependencies@696ee6d68a8fdb357c5a6e26e748fba32f09a9bb # main
       - if: "!contains(github.event.pull_request.title, 'update dependency eslint-config-txo')"
         run: yarn lint:ci
       - name: Validate ESLint run if PR title contains `update dependency eslint-config-txo`
@@ -17,7 +17,7 @@ jobs:
         run: yarn txo-eslint ver --cache
       - name: Send a Slack message on failure
         if: failure()
-        uses: technology-studio/github-workflows/.github/actions/slack-failed-job-message@main
+        uses: technology-studio/github-workflows/.github/actions/slack-failed-job-message@696ee6d68a8fdb357c5a6e26e748fba32f09a9bb # main
         with:
           slack_bot_token: ${{ secrets.TXO_SLACK_BOT_APP_TOKEN }}
           channel_id: ${{ secrets.TXO_SLACK_GITHUB_OPS_CHANNEL_ID }}
diff --git a/.github/workflows/_code-style.yml b/.github/workflows/_code-style.yml
index 54388ca..31192f7 100644
--- a/.github/workflows/_code-style.yml
+++ b/.github/workflows/_code-style.yml
@@ -9,11 +9,11 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
-      - uses: technology-studio/github-workflows/.github/actions/install-dependencies@main
+      - uses: technology-studio/github-workflows/.github/actions/install-dependencies@696ee6d68a8fdb357c5a6e26e748fba32f09a9bb # main
       - run: yarn lint:ci
       - name: Send a Slack message on failure
         if: failure()
-        uses: technology-studio/github-workflows/.github/actions/slack-failed-job-message@main
+        uses: technology-studio/github-workflows/.github/actions/slack-failed-job-message@696ee6d68a8fdb357c5a6e26e748fba32f09a9bb # main
         with:
           slack_bot_token: ${{ secrets.TXO_SLACK_BOT_APP_TOKEN }}
           channel_id: ${{ secrets.TXO_SLACK_GITHUB_OPS_CHANNEL_ID }} 
diff --git a/.github/workflows/_pr.yml b/.github/workflows/_pr.yml
index e76f3a3..ba31f8a 100644
--- a/.github/workflows/_pr.yml
+++ b/.github/workflows/_pr.yml
@@ -13,7 +13,7 @@ jobs:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       - name: Send a Slack message on failure
         if: failure()
-        uses: technology-studio/github-workflows/.github/actions/slack-failed-job-message@main
+        uses: technology-studio/github-workflows/.github/actions/slack-failed-job-message@696ee6d68a8fdb357c5a6e26e748fba32f09a9bb # main
         with:
           slack_bot_token: ${{ secrets.TXO_SLACK_BOT_APP_TOKEN }}
           channel_id: ${{ secrets.TXO_SLACK_GITHUB_OPS_CHANNEL_ID }}
diff --git a/.github/workflows/_prisma.yml b/.github/workflows/_prisma.yml
index a544562..09a9156 100644
--- a/.github/workflows/_prisma.yml
+++ b/.github/workflows/_prisma.yml
@@ -9,7 +9,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
-      - uses: technology-studio/github-workflows/.github/actions/install-dependencies@main
+      - uses: technology-studio/github-workflows/.github/actions/install-dependencies@696ee6d68a8fdb357c5a6e26e748fba32f09a9bb # main
         id: install
       - run: yarn schema:process
       - name: Check not processed schema
@@ -18,7 +18,7 @@ jobs:
           exit $(git status --porcelain=v1 2>/dev/null|wc -l)
       - name: Send a Slack message on failure
         if: failure()
-        uses: technology-studio/github-workflows/.github/actions/slack-failed-job-message@main
+        uses: technology-studio/github-workflows/.github/actions/slack-failed-job-message@696ee6d68a8fdb357c5a6e26e748fba32f09a9bb # main
         with:
           slack_bot_token: ${{ secrets.TXO_SLACK_BOT_APP_TOKEN }}
           channel_id: ${{ secrets.TXO_SLACK_GITHUB_OPS_CHANNEL_ID }}
diff --git a/.github/workflows/_release.yml b/.github/workflows/_release.yml
index 17c6f1f..ec8d212 100644
--- a/.github/workflows/_release.yml
+++ b/.github/workflows/_release.yml
@@ -24,7 +24,7 @@ jobs:
     runs-on: ubuntu-latest
     environment: default-branch-semantic-release
     steps:
-      - uses: technology-studio/github-workflows/.github/actions/github-app-token-generator@main
+      - uses: technology-studio/github-workflows/.github/actions/github-app-token-generator@696ee6d68a8fdb357c5a6e26e748fba32f09a9bb # main
         id: get-token
         with:
           app-id: ${{ secrets.TXO_GITHUB_BOT_APP_ID }}
@@ -33,7 +33,7 @@ jobs:
         with:
           fetch-depth: 0
           persist-credentials: false
-      - uses: technology-studio/github-workflows/.github/actions/install-dependencies@main
+      - uses: technology-studio/github-workflows/.github/actions/install-dependencies@696ee6d68a8fdb357c5a6e26e748fba32f09a9bb # main
         id: install
         with:
           use-cache: false
@@ -61,7 +61,7 @@ jobs:
         env:
           GITHUB_TOKEN: ${{ steps.get-token.outputs.token }}
           SLACK_WEBHOOK: ${{ secrets.SEMANTIC_RELEASE_SLACK_WEBHOOK }}
-      - uses: technology-studio/github-workflows/.github/actions/save-dependencies@main
+      - uses: technology-studio/github-workflows/.github/actions/save-dependencies@696ee6d68a8fdb357c5a6e26e748fba32f09a9bb # main
         with:
           cache_mode: ${{ inputs.cache_mode }}
           download-cache-dir: ${{ steps.install.outputs.download-cache-dir }}
@@ -69,7 +69,7 @@ jobs:
           node-modules-primary-key: ${{ steps.install.outputs.node-modules-primary-key }}
       - name: Send a Slack message on failure
         if: failure()
-        uses: technology-studio/github-workflows/.github/actions/slack-failed-job-message@main
+        uses: technology-studio/github-workflows/.github/actions/slack-failed-job-message@696ee6d68a8fdb357c5a6e26e748fba32f09a9bb # main
         with:
           slack_bot_token: ${{ secrets.TXO_SLACK_BOT_APP_TOKEN }}
           channel_id: ${{ secrets.TXO_SLACK_GITHUB_OPS_CHANNEL_ID }}
diff --git a/.github/workflows/_resolve-yarn-lock.yml b/.github/workflows/_resolve-yarn-lock.yml
index d65805c..2218d20 100644
--- a/.github/workflows/_resolve-yarn-lock.yml
+++ b/.github/workflows/_resolve-yarn-lock.yml
@@ -20,7 +20,7 @@ jobs:
     name: "/"
     runs-on: ubuntu-latest
     steps:
-      - uses: technology-studio/github-workflows/.github/actions/github-app-token-generator@main
+      - uses: technology-studio/github-workflows/.github/actions/github-app-token-generator@696ee6d68a8fdb357c5a6e26e748fba32f09a9bb # main
         id: get-token
         with:
           app-id: ${{ secrets.TXO_GITHUB_BOT_APP_ID }}
diff --git a/.github/workflows/_semantic-title.yml b/.github/workflows/_semantic-title.yml
index 578683f..c8ac606 100644
--- a/.github/workflows/_semantic-title.yml
+++ b/.github/workflows/_semantic-title.yml
@@ -16,7 +16,7 @@ jobs:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       - name: Send a Slack message on failure
         if: failure()
-        uses: technology-studio/github-workflows/.github/actions/slack-failed-job-message@main
+        uses: technology-studio/github-workflows/.github/actions/slack-failed-job-message@696ee6d68a8fdb357c5a6e26e748fba32f09a9bb # main
         with:
           slack_bot_token: ${{ secrets.TXO_SLACK_BOT_APP_TOKEN }}
           channel_id: ${{ secrets.TXO_SLACK_GITHUB_OPS_CHANNEL_ID }}
diff --git a/.github/workflows/_sync-code-in-readme.yml b/.github/workflows/_sync-code-in-readme.yml
index 9c61109..e873672 100644
--- a/.github/workflows/_sync-code-in-readme.yml
+++ b/.github/workflows/_sync-code-in-readme.yml
@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-latest
     environment: default-branch-readme-sync
     steps:
-      - uses: technology-studio/github-workflows/.github/actions/github-app-token-generator@main
+      - uses: technology-studio/github-workflows/.github/actions/github-app-token-generator@696ee6d68a8fdb357c5a6e26e748fba32f09a9bb # main
         id: get-token
         with:
           app-id: ${{ secrets.TXO_GITHUB_BOT_APP_ID }}
diff --git a/.github/workflows/_type-check.yml b/.github/workflows/_type-check.yml
index e8be02f..4509a26 100644
--- a/.github/workflows/_type-check.yml
+++ b/.github/workflows/_type-check.yml
@@ -9,11 +9,11 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
-      - uses: technology-studio/github-workflows/.github/actions/install-dependencies@main
+      - uses: technology-studio/github-workflows/.github/actions/install-dependencies@696ee6d68a8fdb357c5a6e26e748fba32f09a9bb # main
       - run: yarn type-check
       - name: Send a Slack message on failure
         if: failure()
-        uses: technology-studio/github-workflows/.github/actions/slack-failed-job-message@main
+        uses: technology-studio/github-workflows/.github/actions/slack-failed-job-message@696ee6d68a8fdb357c5a6e26e748fba32f09a9bb # main
         with:
           slack_bot_token: ${{ secrets.TXO_SLACK_BOT_APP_TOKEN }}
           channel_id: ${{ secrets.TXO_SLACK_GITHUB_OPS_CHANNEL_ID }}
diff --git a/.github/workflows/_unit-test.yml b/.github/workflows/_unit-test.yml
index b3fac33..85a1afe 100644
--- a/.github/workflows/_unit-test.yml
+++ b/.github/workflows/_unit-test.yml
@@ -9,7 +9,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
-      - uses: technology-studio/github-workflows/.github/actions/install-dependencies@main
+      - uses: technology-studio/github-workflows/.github/actions/install-dependencies@696ee6d68a8fdb357c5a6e26e748fba32f09a9bb # main
       - run: yarn test --coverage
       - id: check-dir
         run: |
@@ -22,7 +22,7 @@ jobs:
         uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de # v5
       - name: Send a Slack message on failure
         if: failure()
-        uses: technology-studio/github-workflows/.github/actions/slack-failed-job-message@main
+        uses: technology-studio/github-workflows/.github/actions/slack-failed-job-message@696ee6d68a8fdb357c5a6e26e748fba32f09a9bb # main
         with:
           slack_bot_token: ${{ secrets.TXO_SLACK_BOT_APP_TOKEN }}
           channel_id: ${{ secrets.TXO_SLACK_GITHUB_OPS_CHANNEL_ID }}
diff --git a/.github/workflows/_yarn-deduplicate.yml b/.github/workflows/_yarn-deduplicate.yml
index 40b2c03..097c2d4 100644
--- a/.github/workflows/_yarn-deduplicate.yml
+++ b/.github/workflows/_yarn-deduplicate.yml
@@ -13,7 +13,7 @@ jobs:
     name: "/"
     runs-on: ubuntu-latest
     steps:
-      - uses: technology-studio/github-workflows/.github/actions/github-app-token-generator@main
+      - uses: technology-studio/github-workflows/.github/actions/github-app-token-generator@696ee6d68a8fdb357c5a6e26e748fba32f09a9bb # main
         id: get-token
         with:
           app-id: ${{ secrets.TXO_GITHUB_BOT_APP_ID }}
diff --git a/.github/workflows/pr.yml b/.github/workflows/pr.yml
index e678fa4..dd4dbdb 100644
--- a/.github/workflows/pr.yml
+++ b/.github/workflows/pr.yml
@@ -13,5 +13,5 @@ permissions:
 jobs:
   semantic-title:
     name: 'Semantic title'
-    uses: technology-studio/github-workflows/.github/workflows/_semantic-title.yml@main
+    uses: technology-studio/github-workflows/.github/workflows/_semantic-title.yml@696ee6d68a8fdb357c5a6e26e748fba32f09a9bb # main
     secrets: inherit
diff --git a/.github/workflows/resolve-yarn-lock.yml b/.github/workflows/resolve-yarn-lock.yml
index ed66286..3d4e278 100644
--- a/.github/workflows/resolve-yarn-lock.yml
+++ b/.github/workflows/resolve-yarn-lock.yml
@@ -8,7 +8,7 @@ jobs:
   resolve-yarn-lock-on-comment:
     name: '/'
     if: contains(github.event.comment.body, '/resolve yarn.lock')
-    uses: technology-studio/github-workflows/.github/workflows/_resolve-yarn-lock.yml@main
+    uses: technology-studio/github-workflows/.github/workflows/_resolve-yarn-lock.yml@696ee6d68a8fdb357c5a6e26e748fba32f09a9bb # main
     secrets: inherit
     with:
       pr_number: ${{ github.event.issue.number }}
diff --git a/.github/workflows/yarn-deduplicate.yml b/.github/workflows/yarn-deduplicate.yml
index 2e2e756..cb9f076 100644
--- a/.github/workflows/yarn-deduplicate.yml
+++ b/.github/workflows/yarn-deduplicate.yml
@@ -8,5 +8,5 @@ jobs:
   yarn-deduplicate-on-comment:
     name: '/'
     if: contains(github.event.comment.body, '/deduplicate yarn.lock')
-    uses: technology-studio/github-workflows/.github/workflows/_yarn-deduplicate.yml@main
+    uses: technology-studio/github-workflows/.github/workflows/_yarn-deduplicate.yml@696ee6d68a8fdb357c5a6e26e748fba32f09a9bb # main
     secrets: inherit