diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index abb8e6037..8dc05d81f 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -9,7 +9,7 @@ on:
 
 jobs:
   run-spotless:
-    uses: martinwitt/unreusable-workflows/.github/workflows/spotless-gradle.yaml@master
+    uses: martinwitt/unreusable-workflows/.github/workflows/spotless-gradle.yaml@e8c750750417822365ad54ff3d53598c8e9f1c9c # master
     with:
       java-version: '21'
       distribution: 'oracle'
@@ -17,15 +17,15 @@ jobs:
   qodana-scan:
     permissions:
       security-events: write
-    uses: martinwitt/unreusable-workflows/.github/workflows/qodana-scan.yaml@master
+    uses: martinwitt/unreusable-workflows/.github/workflows/qodana-scan.yaml@e8c750750417822365ad54ff3d53598c8e9f1c9c # master
   junit:
-    uses: martinwitt/unreusable-workflows/.github/workflows/gradle-tests.yaml@master
+    uses: martinwitt/unreusable-workflows/.github/workflows/gradle-tests.yaml@e8c750750417822365ad54ff3d53598c8e9f1c9c # master
     with:
       java-version: '21'
       distribution: 'oracle'
       working-dir: './'
   build:
-    uses: martinwitt/unreusable-workflows/.github/workflows/gradle-build.yaml@master
+    uses: martinwitt/unreusable-workflows/.github/workflows/gradle-build.yaml@e8c750750417822365ad54ff3d53598c8e9f1c9c # master
     with:
       java-version: '21'
       distribution: 'oracle'