diff --git a/.github/workflows/ci-package-manager.yml b/.github/workflows/ci-package-manager.yml
index d369788c..f459fb74 100644
--- a/.github/workflows/ci-package-manager.yml
+++ b/.github/workflows/ci-package-manager.yml
@@ -11,4 +11,4 @@ on:
 
 jobs:
     ci-package-manager:
-        uses: eslint/workflows/.github/workflows/ci-package-manager.yml@main
+        uses: eslint/workflows/.github/workflows/ci-package-manager.yml@3030377848e4c0b9c28a271b88a5c8c57359da68 # main
diff --git a/.github/workflows/stale.yml b/.github/workflows/stale.yml
index fe232e62..019dec96 100644
--- a/.github/workflows/stale.yml
+++ b/.github/workflows/stale.yml
@@ -10,6 +10,6 @@ permissions:
 
 jobs:
     stale:
-        uses: eslint/workflows/.github/workflows/stale.yml@main
+        uses: eslint/workflows/.github/workflows/stale.yml@3030377848e4c0b9c28a271b88a5c8c57359da68 # main
         secrets:
             token: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/update-readme.yml b/.github/workflows/update-readme.yml
index 96d09866..4ba5a282 100644
--- a/.github/workflows/update-readme.yml
+++ b/.github/workflows/update-readme.yml
@@ -8,6 +8,6 @@ on:
 
 jobs:
     update-readme:
-        uses: eslint/workflows/.github/workflows/update-readme.yml@main
+        uses: eslint/workflows/.github/workflows/update-readme.yml@3030377848e4c0b9c28a271b88a5c8c57359da68 # main
         secrets:
             workflow_push_bot_token: ${{ secrets.WORKFLOW_PUSH_BOT_TOKEN }}