diff --git a/.github/workflows/pr-semantic.yaml b/.github/workflows/pr-semantic.yaml
index 15881f3..a041130 100644
--- a/.github/workflows/pr-semantic.yaml
+++ b/.github/workflows/pr-semantic.yaml
@@ -26,4 +26,4 @@ jobs:
   semantic_pr:
     needs: pr_labels
     name: Semantic
-    uses: dnlopes/Reusable.Workflows/.github/workflows/semantic-pr.yaml@v1
+    uses: dnlopes/Reusable.Workflows/.github/workflows/semantic-pr.yaml@c0dac1d07c91f702f889a8d033e59ebecf0e381c # v1
diff --git a/.github/workflows/pr-trivy.yaml b/.github/workflows/pr-trivy.yaml
index 7fae4f1..5180597 100644
--- a/.github/workflows/pr-trivy.yaml
+++ b/.github/workflows/pr-trivy.yaml
@@ -9,7 +9,7 @@ concurrency:
 jobs:
   security:
     name: Security
-    uses: dnlopes/Reusable.Workflows/.github/workflows/trivy-scan.yaml@v1
+    uses: dnlopes/Reusable.Workflows/.github/workflows/trivy-scan.yaml@c0dac1d07c91f702f889a8d033e59ebecf0e381c # v1
     permissions:
       contents: read
       pull-requests: write # needed for PR comments