diff --git a/.github/actions/setup/action.yml b/.github/actions/setup/action.yml
index 2b62dbe37..799f27872 100644
--- a/.github/actions/setup/action.yml
+++ b/.github/actions/setup/action.yml
@@ -151,7 +151,7 @@ runs:
         token: ${{ inputs.github-token }}
 
     - name: Install Pulumi
-      uses: pulumi/actions@9519177da243fd32cab35cdbf19cce1ab7472fcc # v6
+      uses: pulumi/actions@8582a9e8cc630786854029b4e09281acd6794b58 # v6
       with:
         pulumi-version: ${{ inputs.pulumi-version }}
 
diff --git a/.github/workflows/export-repo-secrets.yml b/.github/workflows/export-repo-secrets.yml
index 661fcbff3..2fe333476 100644
--- a/.github/workflows/export-repo-secrets.yml
+++ b/.github/workflows/export-repo-secrets.yml
@@ -13,7 +13,7 @@ jobs:
           app-id: 1256780 # Export Secrets GitHub App
           private-key: ${{ secrets.EXPORT_SECRETS_PRIVATE_KEY }}
       - name: Export secrets to ESC
-        uses: pulumi/esc-export-secrets-action@v1
+        uses: pulumi/esc-export-secrets-action@9d6485759b6adff2538ae91f1b77cc96265c9dad # v1
         with:
           organization: pulumi
           org-environment: github-secrets/pulumi-examples