diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 0b061b51..8b31e8db 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -237,7 +237,7 @@ jobs:
 
       - name: Upload installer to release
         if: ${{ inputs.release_id }}
-        uses: softprops/action-gh-release@b4309332981a82ec1c5618f44dd2e27cc8bfbfda # v2.5.0
+        uses: softprops/action-gh-release@718ea10b132b3b2eba29c1007bb80653f286566b # v2.5.0
         with:
           tag_name: ${{ inputs.release_id }}
           files: |
@@ -434,7 +434,7 @@ jobs:
         name: python-package-distributions
         path: dist/
     - name: Upload artifacts to release
-      uses: softprops/action-gh-release@b4309332981a82ec1c5618f44dd2e27cc8bfbfda # v2.5.0
+      uses: softprops/action-gh-release@718ea10b132b3b2eba29c1007bb80653f286566b # v2.5.0
       with:
         tag_name: ${{ inputs.release_id }}
         files: dist/*
diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
index c7f6cfb8..3b51bc9f 100644
--- a/.github/workflows/docs.yml
+++ b/.github/workflows/docs.yml
@@ -150,7 +150,7 @@ jobs:
 
       - name: Upload PDF to release
         if: ${{ inputs.release_id }}
-        uses: softprops/action-gh-release@b4309332981a82ec1c5618f44dd2e27cc8bfbfda # v2.5.0
+        uses: softprops/action-gh-release@718ea10b132b3b2eba29c1007bb80653f286566b # v2.5.0
         with:
           tag_name: ${{ inputs.release_id }}
           files: doc/_build/latex/dfetch-*.pdf
diff --git a/.github/workflows/python-publish.yml b/.github/workflows/python-publish.yml
index b0e90abe..e203adf5 100644
--- a/.github/workflows/python-publish.yml
+++ b/.github/workflows/python-publish.yml
@@ -159,7 +159,7 @@ jobs:
         name: oscal-component-definition
         path: dist-oscal/
     - name: Upload SBOM and OSCAL to GitHub Release
-      uses: softprops/action-gh-release@b4309332981a82ec1c5618f44dd2e27cc8bfbfda # v2.5.0
+      uses: softprops/action-gh-release@718ea10b132b3b2eba29c1007bb80653f286566b # v2.5.0
       with:
         tag_name: ${{ github.event.release.tag_name }}
         files: |
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index fa48cd15..5ed03435 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -84,7 +84,7 @@ jobs:
 
       - name: Create release
         if: ${{ steps.release_info.outputs.tag }}
-        uses: softprops/action-gh-release@b4309332981a82ec1c5618f44dd2e27cc8bfbfda # v2.5.0
+        uses: softprops/action-gh-release@718ea10b132b3b2eba29c1007bb80653f286566b # v2.5.0
         with:
           tag_name: ${{ steps.release_info.outputs.tag }}
           name: ${{ steps.release_info.outputs.tag }}