diff --git a/.github/workflows/add-remove-new-fulcio.yaml b/.github/workflows/add-remove-new-fulcio.yaml
index 0f7c0bc54..7695ce807 100644
--- a/.github/workflows/add-remove-new-fulcio.yaml
+++ b/.github/workflows/add-remove-new-fulcio.yaml
@@ -43,7 +43,7 @@ jobs:
       KOCACHE: ~/ko
 
     steps:
-    - uses: chainguard-dev/actions/setup-mirror@8e97c1fc72515d627456cb0b92e9c9f299356375 # v1.5.2
+    - uses: chainguard-dev/actions/setup-mirror@6f4f4de7549514e7b659741b30f6476f245600dd # v1.5.3
     # https://github.com/mvdan/github-actions-golang#how-do-i-set-up-caching-between-builds
 
     - name: Set up Go
@@ -76,7 +76,7 @@ jobs:
     - uses: sigstore/cosign-installer@d7543c93d881b35a8faa02e8e3605f69b7a1ce62 # v3.10.0
 
     - name: Setup Cluster
-      uses: chainguard-dev/actions/setup-kind@8e97c1fc72515d627456cb0b92e9c9f299356375 # v1.5.2
+      uses: chainguard-dev/actions/setup-kind@6f4f4de7549514e7b659741b30f6476f245600dd # v1.5.3
       id: kind
       with:
         k8s-version: ${{ matrix.k8s-version }}
@@ -85,7 +85,7 @@ jobs:
         service-account-issuer: https://kubernetes.default.svc.cluster.local
 
     - name: Setup Knative
-      uses: chainguard-dev/actions/setup-knative@8e97c1fc72515d627456cb0b92e9c9f299356375 # v1.5.2
+      uses: chainguard-dev/actions/setup-knative@6f4f4de7549514e7b659741b30f6476f245600dd # v1.5.3
       with:
         version: "1.18.x"
         serving-features: >
@@ -241,6 +241,6 @@ jobs:
         NEW_FULCIO_URL: ${{ env.NEW_FULCIO_URL }}
     - name: Collect diagnostics
       if: ${{ failure() }}
-      uses: chainguard-dev/actions/kind-diag@8e97c1fc72515d627456cb0b92e9c9f299356375 # v1.5.2
+      uses: chainguard-dev/actions/kind-diag@6f4f4de7549514e7b659741b30f6476f245600dd # v1.5.3
       with:
         artifact-name: logs.${{ matrix.k8s-version }}
diff --git a/.github/workflows/fulcio-rekor-kind.yaml b/.github/workflows/fulcio-rekor-kind.yaml
index a18ae4db7..11a1d22eb 100644
--- a/.github/workflows/fulcio-rekor-kind.yaml
+++ b/.github/workflows/fulcio-rekor-kind.yaml
@@ -49,7 +49,7 @@ jobs:
         path: ./src/github.com/sigstore/scaffolding
         persist-credentials: false
 
-    - uses: chainguard-dev/actions/setup-mirror@8e97c1fc72515d627456cb0b92e9c9f299356375 # v1.5.2
+    - uses: chainguard-dev/actions/setup-mirror@6f4f4de7549514e7b659741b30f6476f245600dd # v1.5.3
     # https://github.com/mvdan/github-actions-golang#how-do-i-set-up-caching-between-builds
 
     - name: Set up Go
@@ -76,7 +76,7 @@ jobs:
     - uses: sigstore/cosign-installer@d7543c93d881b35a8faa02e8e3605f69b7a1ce62 # v3.10.0
 
     - name: Setup Cluster
-      uses: chainguard-dev/actions/setup-kind@8e97c1fc72515d627456cb0b92e9c9f299356375 # v1.5.2
+      uses: chainguard-dev/actions/setup-kind@6f4f4de7549514e7b659741b30f6476f245600dd # v1.5.3
       id: kind
       with:
         k8s-version: ${{ matrix.k8s-version }}
@@ -85,7 +85,7 @@ jobs:
         service-account-issuer: https://kubernetes.default.svc.cluster.local
 
     - name: Setup Knative
-      uses: chainguard-dev/actions/setup-knative@8e97c1fc72515d627456cb0b92e9c9f299356375 # v1.5.2
+      uses: chainguard-dev/actions/setup-knative@6f4f4de7549514e7b659741b30f6476f245600dd # v1.5.3
       with:
         version: "1.18.x"
         serving-features: >
@@ -261,6 +261,6 @@ jobs:
 
     - name: Collect diagnostics
       if: ${{ failure() }}
-      uses: chainguard-dev/actions/kind-diag@8e97c1fc72515d627456cb0b92e9c9f299356375 # v1.5.2
+      uses: chainguard-dev/actions/kind-diag@6f4f4de7549514e7b659741b30f6476f245600dd # v1.5.3
       with:
         artifact-name: logs.${{ matrix.k8s-version }}
diff --git a/.github/workflows/test-action-tuf.yaml b/.github/workflows/test-action-tuf.yaml
index b397b7a56..b5266fe37 100644
--- a/.github/workflows/test-action-tuf.yaml
+++ b/.github/workflows/test-action-tuf.yaml
@@ -129,4 +129,4 @@ jobs:
 
     - name: Collect diagnostics
       if: ${{ failure() }}
-      uses: chainguard-dev/actions/kind-diag@8e97c1fc72515d627456cb0b92e9c9f299356375 # v1.5.2
+      uses: chainguard-dev/actions/kind-diag@6f4f4de7549514e7b659741b30f6476f245600dd # v1.5.3
diff --git a/.github/workflows/test-release.yaml b/.github/workflows/test-release.yaml
index 73137e9de..62248cd1c 100644
--- a/.github/workflows/test-release.yaml
+++ b/.github/workflows/test-release.yaml
@@ -36,7 +36,7 @@ jobs:
       KOCACHE: ~/ko
 
     steps:
-    - uses: chainguard-dev/actions/setup-mirror@8e97c1fc72515d627456cb0b92e9c9f299356375 # v1.5.2
+    - uses: chainguard-dev/actions/setup-mirror@6f4f4de7549514e7b659741b30f6476f245600dd # v1.5.3
 
     - uses: sigstore/cosign-installer@d7543c93d881b35a8faa02e8e3605f69b7a1ce62 # v3.10.0
 
@@ -49,7 +49,7 @@ jobs:
     - uses: ko-build/setup-ko@d006021bd0c28d1ce33a07e7943d48b079944c8d # v0.9
 
     - name: Setup Cluster
-      uses: chainguard-dev/actions/setup-kind@8e97c1fc72515d627456cb0b92e9c9f299356375 # v1.5.2
+      uses: chainguard-dev/actions/setup-kind@6f4f4de7549514e7b659741b30f6476f245600dd # v1.5.3
       id: kind
       with:
         k8s-version: ${{ matrix.k8s-version }}
@@ -58,7 +58,7 @@ jobs:
         service-account-issuer: https://kubernetes.default.svc.cluster.local
 
     - name: Setup Knative
-      uses: chainguard-dev/actions/setup-knative@8e97c1fc72515d627456cb0b92e9c9f299356375 # v1.5.2
+      uses: chainguard-dev/actions/setup-knative@6f4f4de7549514e7b659741b30f6476f245600dd # v1.5.3
       with:
         version: "1.18.x"
         serving-features: >
@@ -181,4 +181,4 @@ jobs:
 
     - name: Collect diagnostics
       if: ${{ failure() }}
-      uses: chainguard-dev/actions/kind-diag@8e97c1fc72515d627456cb0b92e9c9f299356375 # v1.5.2
+      uses: chainguard-dev/actions/kind-diag@6f4f4de7549514e7b659741b30f6476f245600dd # v1.5.3