diff --git a/.github/workflows/javadoc-publication.yaml b/.github/workflows/javadoc-publication.yaml
index a0942b0e..2f3f2366 100644
--- a/.github/workflows/javadoc-publication.yaml
+++ b/.github/workflows/javadoc-publication.yaml
@@ -63,7 +63,7 @@ jobs:
         with:
           jfrogAccessToken: ${{ fromJSON(steps.secrets.outputs.vault).artifactory_access_token }}
       - name: Download Artifacts
-        uses: SonarSource/gh-action_release/download-build@5.4.2
+        uses: SonarSource/gh-action_release/download-build@7bbeea01f7e1dc4960aaaef20ef4baea7242f0ae
         with:
           flat-download: true
           build-number: ${{ steps.get_version.outputs.build }}
@@ -79,7 +79,7 @@ jobs:
       - name: List javadoc files
         run: ls "${{ steps.local_repo.outputs.dir }}/javadoc/${{ github.event.release.tag_name }}"
       - name: Publish javadoc files to S3
-        uses: SonarSource/gh-action_release/aws-s3@5.4.2
+        uses: SonarSource/gh-action_release/aws-s3@7bbeea01f7e1dc4960aaaef20ef4baea7242f0ae
         with:
           command: cp
           flags: --recursive
@@ -90,7 +90,7 @@ jobs:
           aws_session_token: ${{ fromJSON(steps.secrets.outputs.vault).javadoc_aws_security_token }}
           aws_region: eu-central-1
       - name: Delete dir named latest in S3
-        uses: SonarSource/gh-action_release/aws-s3@5.4.2
+        uses: SonarSource/gh-action_release/aws-s3@7bbeea01f7e1dc4960aaaef20ef4baea7242f0ae
         with:
           command: rm
           source: s3://javadocs-cdn-eu-central-1-prod/${{ inputs.javadocDestinationDirectory || github.event.repository.name }}/latest
@@ -100,7 +100,7 @@ jobs:
           aws_region: eu-central-1
         continue-on-error: true # the first time a project publish javadoc, there is no latest dir available
       - name: Upload to dir named latest in S3
-        uses: SonarSource/gh-action_release/aws-s3@5.4.2
+        uses: SonarSource/gh-action_release/aws-s3@7bbeea01f7e1dc4960aaaef20ef4baea7242f0ae
         with:
           command: cp
           flags: --recursive
diff --git a/.github/workflows/main.yaml b/.github/workflows/main.yaml
index c3748321..47b971a4 100644
--- a/.github/workflows/main.yaml
+++ b/.github/workflows/main.yaml
@@ -94,7 +94,7 @@ jobs:
           repository: SonarSource/gh-action_release
           # This property is changed during the release process to reference the correct tag
           # During development you might want to change this to your branch name to run it in another repository
-          ref: 5.4.2
+          ref: 7bbeea01f7e1dc4960aaaef20ef4baea7242f0ae
           path: gh-action_release
       # Clone the calling repo for checking releasability prerequisites
       - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
diff --git a/.github/workflows/maven-central.yaml b/.github/workflows/maven-central.yaml
index a487aa05..0cd64b7a 100644
--- a/.github/workflows/maven-central.yaml
+++ b/.github/workflows/maven-central.yaml
@@ -58,7 +58,7 @@ jobs:
         with:
           jfrogAccessToken: ${{ fromJSON(steps.secrets.outputs.vault).artifactory_access_token }}
       - name: Download Artifacts
-        uses: SonarSource/gh-action_release/download-build@5.4.2
+        uses: SonarSource/gh-action_release/download-build@7bbeea01f7e1dc4960aaaef20ef4baea7242f0ae
         with:
           build-number: ${{ steps.get_version.outputs.build }}
           local-repo-dir: ${{ steps.local_repo.outputs.dir }}
@@ -66,7 +66,7 @@ jobs:
       - name: Maven Central Sync
         id: maven-central-sync
         continue-on-error: true
-        uses: SonarSource/gh-action_release/maven-central-sync@5.4.2
+        uses: SonarSource/gh-action_release/maven-central-sync@7bbeea01f7e1dc4960aaaef20ef4baea7242f0ae
         with:
           local-repo-dir: ${{ steps.local_repo.outputs.dir }}
         env:
diff --git a/.github/workflows/pypi.yaml b/.github/workflows/pypi.yaml
index 93f14cad..2d2a4b4f 100644
--- a/.github/workflows/pypi.yaml
+++ b/.github/workflows/pypi.yaml
@@ -68,7 +68,7 @@ jobs:
         with:
           jfrogAccessToken: ${{ fromJSON(steps.secrets.outputs.vault).artifactory_access_token }}
       - name: Download Artifacts
-        uses: SonarSource/gh-action_release/download-build@5.4.2
+        uses: SonarSource/gh-action_release/download-build@7bbeea01f7e1dc4960aaaef20ef4baea7242f0ae
         with:
           build-number: ${{ steps.get_version.outputs.build }}
           local-repo-dir: ${{ steps.local_repo.outputs.dir }}