diff --git a/.github/workflows/phase7-aws-deploy.yml b/.github/workflows/phase7-aws-deploy.yml
index 8174ad2..bdb7615 100644
--- a/.github/workflows/phase7-aws-deploy.yml
+++ b/.github/workflows/phase7-aws-deploy.yml
@@ -68,7 +68,7 @@ jobs:
         with: {terraform_version: 1.9.8}
       - uses: azure/setup-helm@9bc31f4ebc9c6b171d7bfbaa5d006ae7abdb4310 # v5
         with: {version: v3.17.3}
-      - uses: azure/setup-kubectl@829323503d1be3d00ca8346e5391ca0b07a9ab0d # v5
+      - uses: azure/setup-kubectl@bda439f5f36b99b262ebdcd3613869bddb064c8e # v5
         with: {version: v1.32.2}
       - uses: imjasonh/setup-crane@31b88efe9de28ae0ffa220711af4b60be9435f6e # v0.4
       - name: Configure remote Terraform state
diff --git a/.github/workflows/phase7-image-publish.yml b/.github/workflows/phase7-image-publish.yml
index 1b6b684..aeeb661 100644
--- a/.github/workflows/phase7-image-publish.yml
+++ b/.github/workflows/phase7-image-publish.yml
@@ -63,7 +63,7 @@ jobs:
       - uses: azure/setup-helm@9bc31f4ebc9c6b171d7bfbaa5d006ae7abdb4310 # v5
         with: {version: v3.17.3}
 
-      - uses: azure/setup-kubectl@829323503d1be3d00ca8346e5391ca0b07a9ab0d # v5
+      - uses: azure/setup-kubectl@bda439f5f36b99b262ebdcd3613869bddb064c8e # v5
         with: {version: v1.32.2}
 
       - uses: helm/kind-action@ef37e7f390d99f746eb8b610417061a60e82a6cc # v1
diff --git a/.github/workflows/phase7-local-kubernetes.yml b/.github/workflows/phase7-local-kubernetes.yml
index afc62a0..1b63d9e 100644
--- a/.github/workflows/phase7-local-kubernetes.yml
+++ b/.github/workflows/phase7-local-kubernetes.yml
@@ -36,7 +36,7 @@ jobs:
       - run: python -m pip install -r requirements-dev.txt && python -m pip install -e .
       - uses: azure/setup-helm@9bc31f4ebc9c6b171d7bfbaa5d006ae7abdb4310 # v5
         with: {version: v3.17.3}
-      - uses: azure/setup-kubectl@829323503d1be3d00ca8346e5391ca0b07a9ab0d # v5
+      - uses: azure/setup-kubectl@bda439f5f36b99b262ebdcd3613869bddb064c8e # v5
         with: {version: v1.32.2}
       - uses: helm/kind-action@ef37e7f390d99f746eb8b610417061a60e82a6cc # v1
         with: {install_only: true, version: v0.31.0}