diff --git a/.github/workflows/docker-main.yaml b/.github/workflows/docker-main.yaml
index 60e70e300..cbae4df10 100644
--- a/.github/workflows/docker-main.yaml
+++ b/.github/workflows/docker-main.yaml
@@ -81,13 +81,13 @@ jobs:
           token: ${{ secrets.APPARITOR_GITHUB_TOKEN }}
 
       - name: Bump psql environment
-        uses: mikefarah/yq@03f57b7034d0330d54663881def67523347dfc9c # pin@v4.23.1
+        uses: mikefarah/yq@bc2118736bca883de2e2c345bb7f7ef52c994920 # pin@v4.23.1
         with:
           cmd: yq eval '.image.tag = "${{ needs.publish.outputs.sha-tag }}"' -i
             environments/internal-prd/pomerium-master-postgres/values/pomerium.yaml
 
       - name: Bump mysql environment
-        uses: mikefarah/yq@03f57b7034d0330d54663881def67523347dfc9c # pin@v4.23.1
+        uses: mikefarah/yq@bc2118736bca883de2e2c345bb7f7ef52c994920 # pin@v4.23.1
         with:
           cmd: yq eval '.image.tag = "${{ needs.publish.outputs.sha-tag }}"' -i
             environments/internal-prd/pomerium-master-mysql/values/pomerium.yaml
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 4668ac34c..bbe759945 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -116,7 +116,7 @@ jobs:
           token: ${{ secrets.APPARITOR_GITHUB_TOKEN }}
 
       - name: Bump test environment
-        uses: mikefarah/yq@03f57b7034d0330d54663881def67523347dfc9c # pin@v4.23.1
+        uses: mikefarah/yq@bc2118736bca883de2e2c345bb7f7ef52c994920 # pin@v4.23.1
         with:
           cmd: yq eval '.image.tag = "${{ needs.goreleaser.outputs.tag }}"' -i
             environments/internal-prd/values/pomerium-demo.yaml