diff --git a/.github/workflows/canary.yml b/.github/workflows/canary.yml
index 5ca5cbff..515c7267 100644
--- a/.github/workflows/canary.yml
+++ b/.github/workflows/canary.yml
@@ -23,7 +23,7 @@ jobs:
           INSTALLER_VERSION=$(go run -ldflags "-X main.channel=canary" ./cmd/hermit gen-installer --dest=build/install.sh)
           cp build/install.sh build/install-"${INSTALLER_VERSION}".sh
       - name: Release canary
-        uses: ncipollo/release-action@bcfe5470707e8832e12347755757cec0eb3c22af # v1
+        uses: ncipollo/release-action@339a81892b84b4eeb0f6e744e4574d79d0d9b8dd # v1
         with:
           tag: canary
           name: Canary
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index e00577cf..d52f844d 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -23,13 +23,13 @@ jobs:
           INSTALLER_VERSION=$(go run -ldflags "-X main.channel=stable" ./cmd/hermit gen-installer --dest=build/install.sh)
           cp build/install.sh build/install-"${INSTALLER_VERSION}".sh
       - name: Release versioned
-        uses: ncipollo/release-action@bcfe5470707e8832e12347755757cec0eb3c22af # v1
+        uses: ncipollo/release-action@339a81892b84b4eeb0f6e744e4574d79d0d9b8dd # v1
         with:
           allowUpdates: true
           artifacts: "build/*"
           token: ${{ secrets.GITHUB_TOKEN }}
       - name: Release stable
-        uses: ncipollo/release-action@bcfe5470707e8832e12347755757cec0eb3c22af # v1
+        uses: ncipollo/release-action@339a81892b84b4eeb0f6e744e4574d79d0d9b8dd # v1
         with:
           tag: stable
           name: Stable