diff --git a/.github/workflows/binaries.yml b/.github/workflows/binaries.yml
index 0d1ed8d..e36ea57 100644
--- a/.github/workflows/binaries.yml
+++ b/.github/workflows/binaries.yml
@@ -80,7 +80,7 @@ jobs:
           sha256sum * > checksums-sha256.txt
 
       - name: Upload to GitHub Release
-        uses: softprops/action-gh-release@v3
+        uses: softprops/action-gh-release@v3.0.0
         with:
           files: release/*
           fail_on_unmatched_files: false
diff --git a/.github/workflows/sbom.yml b/.github/workflows/sbom.yml
index 09e786b..bb32973 100644
--- a/.github/workflows/sbom.yml
+++ b/.github/workflows/sbom.yml
@@ -46,7 +46,7 @@ jobs:
 
       - name: Attach SBOMs to release
         if: github.event_name == 'release'
-        uses: softprops/action-gh-release@da05d552573ad5aba039eaac05058a918a7bf631 # v2.2.2
+        uses: softprops/action-gh-release@b4309332981a82ec1c5618f44dd2e27cc8bfbfda # v3.0.0
         with:
           files: |
             sbom-spdx.json