diff --git a/.github/workflows/fossify-event-dispatcher.yml b/.github/workflows/fossify-event-dispatcher.yml
index ca66a30..1490368 100644
--- a/.github/workflows/fossify-event-dispatcher.yml
+++ b/.github/workflows/fossify-event-dispatcher.yml
@@ -54,7 +54,7 @@ jobs:
   dispatch:
     runs-on: ubuntu-latest
     steps:
-      - uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1
+      - uses: step-security/harden-runner@ccd8616d44fd3846e67624a50d5aad6d37bf2d25
         with:
           egress-policy: audit
 
diff --git a/.github/workflows/merge-pull-requests.yml b/.github/workflows/merge-pull-requests.yml
index 5d92775..98fcbbf 100644
--- a/.github/workflows/merge-pull-requests.yml
+++ b/.github/workflows/merge-pull-requests.yml
@@ -67,7 +67,7 @@ jobs:
 
     steps:
       - name: Harden the runner (Audit all outbound calls)
-        uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1
+        uses: step-security/harden-runner@ccd8616d44fd3846e67624a50d5aad6d37bf2d25
         with:
           egress-policy: audit
 
diff --git a/.github/workflows/merge-weblate-prs.yml b/.github/workflows/merge-weblate-prs.yml
index e25a83a..fbffba9 100644
--- a/.github/workflows/merge-weblate-prs.yml
+++ b/.github/workflows/merge-weblate-prs.yml
@@ -39,7 +39,7 @@ jobs:
       GH_TOKEN: ${{ secrets.PERSONAL_TOKEN }}
     steps:
       - name: Harden the runner (Audit all outbound calls)
-        uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1
+        uses: step-security/harden-runner@ccd8616d44fd3846e67624a50d5aad6d37bf2d25
         with:
           egress-policy: audit
 
diff --git a/.github/workflows/prepare-release-pr.yml b/.github/workflows/prepare-release-pr.yml
index 8466286..7a76f43 100644
--- a/.github/workflows/prepare-release-pr.yml
+++ b/.github/workflows/prepare-release-pr.yml
@@ -13,7 +13,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Harden the runner (Audit all outbound calls)
-        uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1
+        uses: step-security/harden-runner@ccd8616d44fd3846e67624a50d5aad6d37bf2d25
         with:
           egress-policy: audit
 
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 416278d..cd3e5b5 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -55,7 +55,7 @@ jobs:
     timeout-minutes: 30
     steps:
       - name: Harden the runner (Audit all outbound calls)
-        uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1
+        uses: step-security/harden-runner@ccd8616d44fd3846e67624a50d5aad6d37bf2d25
         with:
           egress-policy: audit
 
@@ -126,7 +126,7 @@ jobs:
     timeout-minutes: 20
     steps:
       - name: Harden the runner (Audit all outbound calls)
-        uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1
+        uses: step-security/harden-runner@ccd8616d44fd3846e67624a50d5aad6d37bf2d25
         with:
           egress-policy: audit
 
diff --git a/.github/workflows/update-commons.yml b/.github/workflows/update-commons.yml
index 873e5ec..2cad040 100644
--- a/.github/workflows/update-commons.yml
+++ b/.github/workflows/update-commons.yml
@@ -12,7 +12,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Harden the runner (Audit all outbound calls)
-        uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1
+        uses: step-security/harden-runner@ccd8616d44fd3846e67624a50d5aad6d37bf2d25
         with:
           egress-policy: audit