diff --git a/.github/workflows/assign-asset-label.yml b/.github/workflows/assign-asset-label.yml
index 867d7b9323af..89786fb049f2 100644
--- a/.github/workflows/assign-asset-label.yml
+++ b/.github/workflows/assign-asset-label.yml
@@ -37,7 +37,7 @@ jobs:
             echo "name=${assets}" >> $GITHUB_OUTPUT
           fi
       - name: Show messages
-        uses: actions/github-script@d7906e4ad0b1822421a7e6a35d5ca353c962f410
+        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea
         with:
           script: |
             if ("${{ steps.get-asset.outputs.result }}" != "ok" ) {
diff --git a/.github/workflows/ci-pipeline.yml b/.github/workflows/ci-pipeline.yml
index b1fdf98d0617..4a9398eded9f 100644
--- a/.github/workflows/ci-pipeline.yml
+++ b/.github/workflows/ci-pipeline.yml
@@ -174,7 +174,7 @@ jobs:
     steps:
       - id: get-status
         name: Check Status
-        uses: actions/github-script@d7906e4ad0b1822421a7e6a35d5ca353c962f410
+        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea
         with:
           result-encoding: string
           script: |
@@ -224,7 +224,7 @@ jobs:
       # Approve the CI's PR automatically, as it has been tested in our internal pipeline already
       # Approved by the 'github-actions' user; a PR can't be approved by its author
       - name: PR Approval
-        uses: actions/github-script@d7906e4ad0b1822421a7e6a35d5ca353c962f410
+        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea
         with:
           result-encoding: string
           retries: 3
@@ -237,7 +237,7 @@ jobs:
             });
       - name: Merge
         id: merge
-        uses: actions/github-script@d7906e4ad0b1822421a7e6a35d5ca353c962f410
+        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea
         with:
           result-encoding: string
           retries: 3
@@ -254,7 +254,7 @@ jobs:
       # post a comment on the PR and assign a maintainer agent to review it
       - name: Manual review required
         if: ${{ always() && steps.merge.outcome != 'success' }}
-        uses: actions/github-script@d7906e4ad0b1822421a7e6a35d5ca353c962f410
+        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea
         env:
           BODY: |
             There has been an error during the automated release process. Manual revision is now required.
diff --git a/.github/workflows/delete-solved-cards.yml b/.github/workflows/delete-solved-cards.yml
index 195adc3e42ba..fb14af55c8d1 100644
--- a/.github/workflows/delete-solved-cards.yml
+++ b/.github/workflows/delete-solved-cards.yml
@@ -24,7 +24,7 @@ jobs:
         uses: xom9ikk/dotenv@de1ff27d319507880e6621e4d47424c677d95f68
         with:
           path: .github/workflows/
-      - uses: actions/github-script@d7906e4ad0b1822421a7e6a35d5ca353c962f410
+      - uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea
         with:
           script: |
             const {SOLVED_COLUMN_ID} = process.env