diff --git a/.github/workflows/client.yml b/.github/workflows/client.yml
index b65e15d..1baa494 100644
--- a/.github/workflows/client.yml
+++ b/.github/workflows/client.yml
@@ -35,7 +35,7 @@ jobs:
         run: make build
 
       - name: Sign package
-        uses: actionhippie/gpgsign@ea53cf3088a4d2ca04d493df9cfcc0cbcdc1f075 # v1
+        uses: actionhippie/gpgsign@ac40437a8c10f2b1bf7203b9e2b319c85e551fb0 # v1
         with:
           private_key: ${{ secrets.GNUPG_KEY }}
           passphrase: ${{ secrets.GNUPG_PASSWORD }}
diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml
index 5268448..9a047ad 100644
--- a/.github/workflows/docker.yml
+++ b/.github/workflows/docker.yml
@@ -107,7 +107,7 @@ jobs:
         uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
 
       - name: Hub readme
-        uses: actionhippie/pushrm@2f7e4beeb0c27f1c319e85ef5bb7cf3a420e9d96 # v1
+        uses: actionhippie/pushrm@771e4305eb41fd54b6e0ae7f60264ab7501bdeb6 # v1
         with:
           provider: dockerhub
           target: crafthippie/bromance
@@ -117,7 +117,7 @@ jobs:
           readme: README.md
 
       - name: Quay readme
-        uses: actionhippie/pushrm@2f7e4beeb0c27f1c319e85ef5bb7cf3a420e9d96 # v1
+        uses: actionhippie/pushrm@771e4305eb41fd54b6e0ae7f60264ab7501bdeb6 # v1
         with:
           provider: quay
           target: quay.io/crafthippie/bromance