diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index a85386f..1d6fbd9 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -18,13 +18,15 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
     - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
-    - uses: chainguard-dev/actions/setup-gitsign@main
+    - uses: chainguard-dev/actions/setup-gitsign@857131c4163464ba1cf5f67fb2478a67d6260971 # main
     - name: Install uv
       uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7
     - name: Set up Python
       run: uv python install
     - name: Build release
-      run: .github/scripts/release-build.sh ${{ github.event.inputs.api_version }}
+      run: .github/scripts/release-build.sh "$API_VERSION"
+      env:
+        API_VERSION: ${{ github.event.inputs.api_version }}
     - name: Get SDK version
       id: get-sdk-version
       run: |