diff --git a/.github/workflows/benchmarks.yml b/.github/workflows/benchmarks.yml
index 1a934842bfb..95dbd2030e1 100644
--- a/.github/workflows/benchmarks.yml
+++ b/.github/workflows/benchmarks.yml
@@ -132,7 +132,7 @@ jobs:
 
       # this will work for both PR and master
       - name: Upload criterion results to DO spaces
-        uses: shallwefootball/s3-upload-action@master
+        uses: shallwefootball/s3-upload-action@0d261a6f15b3b2e209dfebdecace4b100c04f95b # master
         with:
           aws_key_id: ${{ secrets.AWS_KEY_ID }}
           aws_secret_access_key: ${{ secrets.AWS_SECRET_ACCESS_KEY}}
@@ -308,7 +308,7 @@ jobs:
 
       # this will work for both PR and master
       - name: Upload callgrind results to DO spaces
-        uses: shallwefootball/s3-upload-action@master
+        uses: shallwefootball/s3-upload-action@0d261a6f15b3b2e209dfebdecace4b100c04f95b # master
         with:
           aws_key_id: ${{ secrets.AWS_KEY_ID }}
           aws_secret_access_key: ${{ secrets.AWS_SECRET_ACCESS_KEY}}
diff --git a/.github/workflows/docs-publish.yaml b/.github/workflows/docs-publish.yaml
index 46771a92791..4cbf3b76a25 100644
--- a/.github/workflows/docs-publish.yaml
+++ b/.github/workflows/docs-publish.yaml
@@ -47,7 +47,7 @@ jobs:
         run: pnpm build
 
       - name: Publish docs to S3
-        uses: shallwefootball/s3-upload-action@master
+        uses: shallwefootball/s3-upload-action@0d261a6f15b3b2e209dfebdecace4b100c04f95b # master
         with:
           aws_key_id: ${{ secrets.DOCS_AWS_KEY_ID }}
           aws_secret_access_key: ${{ secrets.DOCS_AWS_SECRET_ACCESS_KEY}}
diff --git a/.github/workflows/package.yml b/.github/workflows/package.yml
index 9e3a92ee9bd..8263871133b 100644
--- a/.github/workflows/package.yml
+++ b/.github/workflows/package.yml
@@ -157,7 +157,7 @@ jobs:
         id: extract_branch
 
       - name: Upload to AWS S3
-        uses: shallwefootball/s3-upload-action@master
+        uses: shallwefootball/s3-upload-action@0d261a6f15b3b2e209dfebdecace4b100c04f95b # master
         with:
           aws_key_id: ${{ secrets.AWS_KEY_ID }}
           aws_secret_access_key: ${{ secrets.AWS_SECRET_ACCESS_KEY}}