diff --git a/.github/workflows/fleet-ci.yml b/.github/workflows/fleet-ci.yml
index 0362946..b41089d 100644
--- a/.github/workflows/fleet-ci.yml
+++ b/.github/workflows/fleet-ci.yml
@@ -17,7 +17,7 @@ jobs:
       - uses: actions/checkout@v6
       - name: Initialize public workflow module
         run: git submodule update --init --depth 1 foundry/ops/workflows
-      - uses: pnpm/action-setup@v4
+      - uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6
       - uses: actions/setup-node@v6
         with:
           node-version: "22"
diff --git a/.github/workflows/ops-console-ci.yml b/.github/workflows/ops-console-ci.yml
index 46f9a25..0285244 100644
--- a/.github/workflows/ops-console-ci.yml
+++ b/.github/workflows/ops-console-ci.yml
@@ -15,7 +15,7 @@ jobs:
     timeout-minutes: 15
     steps:
       - uses: actions/checkout@v6
-      - uses: pnpm/action-setup@v4
+      - uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6
       - uses: actions/setup-node@v6
         with:
           node-version: "22"
diff --git a/.github/workflows/reel-pipeline-ci.yml b/.github/workflows/reel-pipeline-ci.yml
index 4f28ee9..e2f7f71 100644
--- a/.github/workflows/reel-pipeline-ci.yml
+++ b/.github/workflows/reel-pipeline-ci.yml
@@ -20,7 +20,7 @@ jobs:
       - uses: actions/checkout@v6
       - name: Install media tools
         run: sudo apt-get update && sudo apt-get install --yes ffmpeg
-      - uses: pnpm/action-setup@v4
+      - uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6
       - uses: actions/setup-node@v6
         with:
           node-version: "22"