diff --git a/.github/workflows/cid-pullrequest.yml b/.github/workflows/cid-pullrequest.yml
index ef39147..0cf686d 100644
--- a/.github/workflows/cid-pullrequest.yml
+++ b/.github/workflows/cid-pullrequest.yml
@@ -104,7 +104,7 @@ jobs:
           egress-policy: ${{ env.EGRESS_POLICY }}
           allowed-endpoints: ${{ env.EGRESS_POLICY_ALLOWED_ENDPOINTS }}
       - name: prepare environment
-        uses: cidverse/ghact-cid-setup@main
+        uses: cidverse/ghact-cid-setup@31e7177a4d98b05a05b4671f70df0ed199bfb9a1 # v0.1.0
         with:
           version: ${{ env.CID_VERSION }}
       - name: checkout
@@ -136,7 +136,7 @@ jobs:
           egress-policy: ${{ env.EGRESS_POLICY }}
           allowed-endpoints: ${{ env.EGRESS_POLICY_ALLOWED_ENDPOINTS }} ${{ env.EGRESS_POLICY_ALLOWED_ENDPOINTS_BUILD }}
       - name: prepare environment
-        uses: cidverse/ghact-cid-setup@main
+        uses: cidverse/ghact-cid-setup@31e7177a4d98b05a05b4671f70df0ed199bfb9a1 # v0.1.0
         with:
           version: ${{ env.CID_VERSION }}
       - name: checkout
@@ -170,7 +170,7 @@ jobs:
           egress-policy: ${{ env.EGRESS_POLICY }}
           allowed-endpoints: ${{ env.EGRESS_POLICY_ALLOWED_ENDPOINTS }} ${{ env.EGRESS_POLICY_ALLOWED_ENDPOINTS_TEST }}
       - name: prepare environment
-        uses: cidverse/ghact-cid-setup@main
+        uses: cidverse/ghact-cid-setup@31e7177a4d98b05a05b4671f70df0ed199bfb9a1 # v0.1.0
         with:
           version: ${{ env.CID_VERSION }}
       - name: checkout
@@ -206,7 +206,7 @@ jobs:
           egress-policy: ${{ env.EGRESS_POLICY }}
           allowed-endpoints: ${{ env.EGRESS_POLICY_ALLOWED_ENDPOINTS }} ${{ env.EGRESS_POLICY_ALLOWED_ENDPOINTS_SCAN }}
       - name: prepare environment
-        uses: cidverse/ghact-cid-setup@main
+        uses: cidverse/ghact-cid-setup@31e7177a4d98b05a05b4671f70df0ed199bfb9a1 # v0.1.0
         with:
           version: ${{ env.CID_VERSION }}
       - name: checkout
diff --git a/.github/workflows/cid.yml b/.github/workflows/cid.yml
index 77c72c9..f3b4860 100644
--- a/.github/workflows/cid.yml
+++ b/.github/workflows/cid.yml
@@ -106,7 +106,7 @@ jobs:
           egress-policy: ${{ env.EGRESS_POLICY }}
           allowed-endpoints: ${{ env.EGRESS_POLICY_ALLOWED_ENDPOINTS }}
       - name: prepare environment
-        uses: cidverse/ghact-cid-setup@main
+        uses: cidverse/ghact-cid-setup@31e7177a4d98b05a05b4671f70df0ed199bfb9a1 # v0.1.0
         with:
           version: ${{ env.CID_VERSION }}
       - name: checkout
@@ -138,7 +138,7 @@ jobs:
           egress-policy: ${{ env.EGRESS_POLICY }}
           allowed-endpoints: ${{ env.EGRESS_POLICY_ALLOWED_ENDPOINTS }} ${{ env.EGRESS_POLICY_ALLOWED_ENDPOINTS_BUILD }}
       - name: prepare environment
-        uses: cidverse/ghact-cid-setup@main
+        uses: cidverse/ghact-cid-setup@31e7177a4d98b05a05b4671f70df0ed199bfb9a1 # v0.1.0
         with:
           version: ${{ env.CID_VERSION }}
       - name: checkout
@@ -172,7 +172,7 @@ jobs:
           egress-policy: ${{ env.EGRESS_POLICY }}
           allowed-endpoints: ${{ env.EGRESS_POLICY_ALLOWED_ENDPOINTS }} ${{ env.EGRESS_POLICY_ALLOWED_ENDPOINTS_TEST }}
       - name: prepare environment
-        uses: cidverse/ghact-cid-setup@main
+        uses: cidverse/ghact-cid-setup@31e7177a4d98b05a05b4671f70df0ed199bfb9a1 # v0.1.0
         with:
           version: ${{ env.CID_VERSION }}
       - name: checkout
@@ -208,7 +208,7 @@ jobs:
           egress-policy: ${{ env.EGRESS_POLICY }}
           allowed-endpoints: ${{ env.EGRESS_POLICY_ALLOWED_ENDPOINTS }} ${{ env.EGRESS_POLICY_ALLOWED_ENDPOINTS_SCAN }}
       - name: prepare environment
-        uses: cidverse/ghact-cid-setup@main
+        uses: cidverse/ghact-cid-setup@31e7177a4d98b05a05b4671f70df0ed199bfb9a1 # v0.1.0
         with:
           version: ${{ env.CID_VERSION }}
       - name: checkout
@@ -254,7 +254,7 @@ jobs:
           egress-policy: ${{ env.EGRESS_POLICY }}
           allowed-endpoints: ${{ env.EGRESS_POLICY_ALLOWED_ENDPOINTS }} ${{ env.EGRESS_POLICY_ALLOWED_ENDPOINTS_PACKAGE }}
       - name: prepare environment
-        uses: cidverse/ghact-cid-setup@main
+        uses: cidverse/ghact-cid-setup@31e7177a4d98b05a05b4671f70df0ed199bfb9a1 # v0.1.0
         with:
           version: ${{ env.CID_VERSION }}
       - name: checkout
@@ -300,7 +300,7 @@ jobs:
           egress-policy: ${{ env.EGRESS_POLICY }}
           allowed-endpoints: ${{ env.EGRESS_POLICY_ALLOWED_ENDPOINTS }} ${{ env.EGRESS_POLICY_ALLOWED_ENDPOINTS_PUBLISH }}
       - name: prepare environment
-        uses: cidverse/ghact-cid-setup@main
+        uses: cidverse/ghact-cid-setup@31e7177a4d98b05a05b4671f70df0ed199bfb9a1 # v0.1.0
         with:
           version: ${{ env.CID_VERSION }}
       - name: checkout