diff --git a/.github/workflows/client.yml b/.github/workflows/client.yml
index 1baa494..9a87cd8 100644
--- a/.github/workflows/client.yml
+++ b/.github/workflows/client.yml
@@ -35,7 +35,7 @@ jobs:
         run: make build
 
       - name: Sign package
-        uses: actionhippie/gpgsign@ac40437a8c10f2b1bf7203b9e2b319c85e551fb0 # v1
+        uses: actionhippie/gpgsign@c091201fa076c97e4a1b24f94ce3204e3bb4978f # v1
         with:
           private_key: ${{ secrets.GNUPG_KEY }}
           passphrase: ${{ secrets.GNUPG_PASSWORD }}
diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml
index b2ee1aa..368446f 100644
--- a/.github/workflows/docker.yml
+++ b/.github/workflows/docker.yml
@@ -107,7 +107,7 @@ jobs:
         uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
 
       - name: Hub readme
-        uses: actionhippie/pushrm@771e4305eb41fd54b6e0ae7f60264ab7501bdeb6 # v1
+        uses: actionhippie/pushrm@db8835668f770a1b8be17d19b5e6b36450c6766f # v1
         with:
           provider: dockerhub
           target: crafthippie/bromance
@@ -117,7 +117,7 @@ jobs:
           readme: README.md
 
       - name: Quay readme
-        uses: actionhippie/pushrm@771e4305eb41fd54b6e0ae7f60264ab7501bdeb6 # v1
+        uses: actionhippie/pushrm@db8835668f770a1b8be17d19b5e6b36450c6766f # v1
         with:
           provider: quay
           target: quay.io/crafthippie/bromance