diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 030fb929..c326ead4 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -237,7 +237,7 @@ jobs:
 
       - name: Upload installer to release
         if: ${{ inputs.release_id }}
-        uses: softprops/action-gh-release@718ea10b132b3b2eba29c1007bb80653f286566b # v2.5.0
+        uses: softprops/action-gh-release@3d0d9888cb7fd7b750713d6e236d1fcb99157228 # v2.5.0
         with:
           tag_name: ${{ inputs.release_id }}
           files: |
@@ -434,7 +434,7 @@ jobs:
         name: python-package-distributions
         path: dist/
     - name: Upload artifacts to release
-      uses: softprops/action-gh-release@718ea10b132b3b2eba29c1007bb80653f286566b # v2.5.0
+      uses: softprops/action-gh-release@3d0d9888cb7fd7b750713d6e236d1fcb99157228 # v2.5.0
       with:
         tag_name: ${{ inputs.release_id }}
         files: dist/*
diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
index 65077d06..80aa637a 100644
--- a/.github/workflows/docs.yml
+++ b/.github/workflows/docs.yml
@@ -150,7 +150,7 @@ jobs:
 
       - name: Upload PDF to release
         if: ${{ inputs.release_id }}
-        uses: softprops/action-gh-release@718ea10b132b3b2eba29c1007bb80653f286566b # v2.5.0
+        uses: softprops/action-gh-release@3d0d9888cb7fd7b750713d6e236d1fcb99157228 # v2.5.0
         with:
           tag_name: ${{ inputs.release_id }}
           files: doc/_build/latex/dfetch-*.pdf
diff --git a/.github/workflows/python-publish.yml b/.github/workflows/python-publish.yml
index 1933310c..68832d68 100644
--- a/.github/workflows/python-publish.yml
+++ b/.github/workflows/python-publish.yml
@@ -159,7 +159,7 @@ jobs:
         name: oscal-component-definition
         path: dist-oscal/
     - name: Upload SBOM and OSCAL to GitHub Release
-      uses: softprops/action-gh-release@718ea10b132b3b2eba29c1007bb80653f286566b # v2.5.0
+      uses: softprops/action-gh-release@3d0d9888cb7fd7b750713d6e236d1fcb99157228 # v2.5.0
       with:
         tag_name: ${{ github.event.release.tag_name }}
         files: |
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index c8c3639a..538bf2ed 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -84,7 +84,7 @@ jobs:
 
       - name: Create release
         if: ${{ steps.release_info.outputs.tag }}
-        uses: softprops/action-gh-release@718ea10b132b3b2eba29c1007bb80653f286566b # v2.5.0
+        uses: softprops/action-gh-release@3d0d9888cb7fd7b750713d6e236d1fcb99157228 # v2.5.0
         with:
           tag_name: ${{ steps.release_info.outputs.tag }}
           name: ${{ steps.release_info.outputs.tag }}