diff --git a/.github/workflows/bake_update.yml b/.github/workflows/bake_update.yml
index 9ddca544..1883aeb6 100644
--- a/.github/workflows/bake_update.yml
+++ b/.github/workflows/bake_update.yml
@@ -52,7 +52,7 @@ jobs:
           branch: main
           enforce_admins: false
 
-      - uses: EndBug/add-and-commit@645ecc0dd0a57f4d86d26c0aa5fc42c0a856fbca # v11
+      - uses: EndBug/add-and-commit@cc9c08ba6c8df3b93a8f2db63e89b98368ae2ae8 # v11
         with:
           author_name: CloudNativePG Automated Updates
           author_email: noreply@cnpg.com
diff --git a/.github/workflows/catalogs.yml b/.github/workflows/catalogs.yml
index 0bb3aa1c..36e06208 100644
--- a/.github/workflows/catalogs.yml
+++ b/.github/workflows/catalogs.yml
@@ -74,7 +74,7 @@ jobs:
           git status
           git diff --staged
 
-      - uses: EndBug/add-and-commit@645ecc0dd0a57f4d86d26c0aa5fc42c0a856fbca # v11
+      - uses: EndBug/add-and-commit@cc9c08ba6c8df3b93a8f2db63e89b98368ae2ae8 # v11
         if: ${{ github.ref == 'refs/heads/main' }}
         with:
           cwd: 'artifacts'
@@ -102,7 +102,7 @@ jobs:
           git diff --staged
 
       # TODO: remove this step once system images are EOL
-      - uses: EndBug/add-and-commit@645ecc0dd0a57f4d86d26c0aa5fc42c0a856fbca # v11
+      - uses: EndBug/add-and-commit@cc9c08ba6c8df3b93a8f2db63e89b98368ae2ae8 # v11
         if: ${{ github.ref == 'refs/heads/main' }}
         with:
           cwd: 'postgres-containers'