diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 5afddd5..d0a5739 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -33,4 +33,4 @@ concurrency:
 
 jobs:
   ci:
-    uses: cplieger/ci/.github/workflows/ci.yaml@d05c5f0f9e7f32a8041c686bc993037635685201 # v2
+    uses: cplieger/ci/.github/workflows/ci.yaml@7b326ba9c26624f3e9453743da56f86447ac50a7 # v2
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 6fcd2ec..331fd1b 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -23,4 +23,4 @@ jobs:
       security-events: write
       contents: read
       actions: read
-    uses: cplieger/ci/.github/workflows/codeql.yaml@d05c5f0f9e7f32a8041c686bc993037635685201 # v2
+    uses: cplieger/ci/.github/workflows/codeql.yaml@7b326ba9c26624f3e9453743da56f86447ac50a7 # v2
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index a8d4fb3..5a43f90 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -63,7 +63,7 @@ jobs:
       id-token: write
       attestations: write
       security-events: write
-    uses: cplieger/ci/.github/workflows/release.yaml@d05c5f0f9e7f32a8041c686bc993037635685201 # v2
+    uses: cplieger/ci/.github/workflows/release.yaml@7b326ba9c26624f3e9453743da56f86447ac50a7 # v2
     # Forward only the two Docker Hub publish credentials the reusable pipeline
     # actually declares and consumes, rather than `secrets: inherit` (which
     # exposes every repo secret to the reusable-workflow trust boundary). Both
diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml
index 08d97ae..8ed186c 100644
--- a/.github/workflows/security.yml
+++ b/.github/workflows/security.yml
@@ -28,4 +28,4 @@ jobs:
     permissions:
       contents: read
       security-events: write
-    uses: cplieger/ci/.github/workflows/security-scan.yaml@d05c5f0f9e7f32a8041c686bc993037635685201 # v2
+    uses: cplieger/ci/.github/workflows/security-scan.yaml@7b326ba9c26624f3e9453743da56f86447ac50a7 # v2