diff --git a/claude-workflows/DEVELOPING.md b/claude-workflows/DEVELOPING.md
index 84b10825..7e0ea842 100644
--- a/claude-workflows/DEVELOPING.md
+++ b/claude-workflows/DEVELOPING.md
@@ -52,6 +52,16 @@ All workflow actions include default MCP servers. The base action does not.
 
 Prompts instruct Claude to call `mcp__agents-md-generator__generate_agents_md` at startup for repository context, with a fallback to manual exploration if it fails.
 
+## Updating the pinned Claude action SHA
+
+Legacy Claude composite actions pin `elastic/ai-github-claude-code-action` to a full commit SHA.
+
+When bumping:
+
+1. Resolve the target commit SHA from the `working-forks` branch in `elastic/ai-github-claude-code-action`.
+2. Update every `uses: elastic/ai-github-claude-code-action@...` entry in `claude-workflows/**/action.yml` to the same SHA.
+3. Run `make lint` to validate all workflow and composite action files.
+
 ## Prefer Documentation Over New Workflows
 
 Don't create a new workflow unless you need different permissions, triggers, or tooling. Instead:
diff --git a/claude-workflows/base/action.yml b/claude-workflows/base/action.yml
index 92316176..31ddc003 100644
--- a/claude-workflows/base/action.yml
+++ b/claude-workflows/base/action.yml
@@ -70,7 +70,7 @@ runs:
   steps:
     - name: Run Claude Code
       id: claude
-      uses: elastic/ai-github-claude-code-action@working-forks
+      uses: elastic/ai-github-claude-code-action@93b29e0893796474092432753830760c396fcf8c
       with:
         claude_code_oauth_token: ${{ inputs.claude-oauth-token }}
         github_token: ${{ inputs.github-token }}
diff --git a/claude-workflows/build-failure-buildkite/rwx/action.yml b/claude-workflows/build-failure-buildkite/rwx/action.yml
index aa442111..a53420a9 100644
--- a/claude-workflows/build-failure-buildkite/rwx/action.yml
+++ b/claude-workflows/build-failure-buildkite/rwx/action.yml
@@ -126,7 +126,7 @@ runs:
       id: claude
       env:
         GITHUB_TOKEN: ${{ inputs.github-token }}
-      uses: elastic/ai-github-claude-code-action@working-forks
+      uses: elastic/ai-github-claude-code-action@93b29e0893796474092432753830760c396fcf8c
       with:
         claude_code_oauth_token: ${{ inputs.claude-oauth-token }}
         github_token: ${{ inputs.github-token }}
diff --git a/claude-workflows/build-failure-github-actions/rwx/action.yml b/claude-workflows/build-failure-github-actions/rwx/action.yml
index 58f4830c..4f53ac80 100644
--- a/claude-workflows/build-failure-github-actions/rwx/action.yml
+++ b/claude-workflows/build-failure-github-actions/rwx/action.yml
@@ -65,7 +65,7 @@ runs:
       id: claude
       env:
         GITHUB_TOKEN: ${{ inputs.github-token }}
-      uses: elastic/ai-github-claude-code-action@working-forks
+      uses: elastic/ai-github-claude-code-action@93b29e0893796474092432753830760c396fcf8c
       with:
         claude_code_oauth_token: ${{ inputs.claude-oauth-token }}
         github_token: ${{ inputs.github-token }}
diff --git a/claude-workflows/generate-report/ro/action.yml b/claude-workflows/generate-report/ro/action.yml
index 67352492..95199513 100644
--- a/claude-workflows/generate-report/ro/action.yml
+++ b/claude-workflows/generate-report/ro/action.yml
@@ -100,7 +100,7 @@ runs:
       id: claude
       env:
         GITHUB_TOKEN: ${{ inputs.github-token }}
-      uses: elastic/ai-github-claude-code-action@working-forks
+      uses: elastic/ai-github-claude-code-action@93b29e0893796474092432753830760c396fcf8c
       with:
         claude_code_oauth_token: ${{ inputs.claude-oauth-token }}
         github_token: ${{ inputs.github-token }}
diff --git a/claude-workflows/issue-triage/ro/action.yml b/claude-workflows/issue-triage/ro/action.yml
index 04315810..02c5bd04 100644
--- a/claude-workflows/issue-triage/ro/action.yml
+++ b/claude-workflows/issue-triage/ro/action.yml
@@ -73,7 +73,7 @@ runs:
       id: claude
       env:
         GITHUB_TOKEN: ${{ inputs.github-token }}
-      uses: elastic/ai-github-claude-code-action@working-forks
+      uses: elastic/ai-github-claude-code-action@93b29e0893796474092432753830760c396fcf8c
       with:
         claude_code_oauth_token: ${{ inputs.claude-oauth-token }}
         github_token: ${{ inputs.github-token }}
diff --git a/claude-workflows/issue-triage/rwx/action.yml b/claude-workflows/issue-triage/rwx/action.yml
index 9bd71532..ad965310 100644
--- a/claude-workflows/issue-triage/rwx/action.yml
+++ b/claude-workflows/issue-triage/rwx/action.yml
@@ -73,7 +73,7 @@ runs:
       id: claude
       env:
         GITHUB_TOKEN: ${{ inputs.github-token }}
-      uses: elastic/ai-github-claude-code-action@working-forks
+      uses: elastic/ai-github-claude-code-action@93b29e0893796474092432753830760c396fcf8c
       with:
         claude_code_oauth_token: ${{ inputs.claude-oauth-token }}
         github_token: ${{ inputs.github-token }}
diff --git a/claude-workflows/mention-in-issue/rwx/action.yml b/claude-workflows/mention-in-issue/rwx/action.yml
index 79192d0f..1ffaa771 100644
--- a/claude-workflows/mention-in-issue/rwx/action.yml
+++ b/claude-workflows/mention-in-issue/rwx/action.yml
@@ -73,7 +73,7 @@ runs:
       id: claude
       env:
         GITHUB_TOKEN: ${{ inputs.github-token }}
-      uses: elastic/ai-github-claude-code-action@working-forks
+      uses: elastic/ai-github-claude-code-action@93b29e0893796474092432753830760c396fcf8c
       with:
         claude_code_oauth_token: ${{ inputs.claude-oauth-token }}
         github_token: ${{ inputs.github-token }}
diff --git a/claude-workflows/mention-in-issue/rwxp/action.yml b/claude-workflows/mention-in-issue/rwxp/action.yml
index e8d951ff..65de1f1e 100644
--- a/claude-workflows/mention-in-issue/rwxp/action.yml
+++ b/claude-workflows/mention-in-issue/rwxp/action.yml
@@ -73,7 +73,7 @@ runs:
       id: claude
       env:
         GITHUB_TOKEN: ${{ inputs.github-token }}
-      uses: elastic/ai-github-claude-code-action@working-forks
+      uses: elastic/ai-github-claude-code-action@93b29e0893796474092432753830760c396fcf8c
       with:
         claude_code_oauth_token: ${{ inputs.claude-oauth-token }}
         github_token: ${{ inputs.github-token }}
diff --git a/claude-workflows/mention-in-pr/rwx/action.yml b/claude-workflows/mention-in-pr/rwx/action.yml
index f5e2a7c1..5799e9ff 100644
--- a/claude-workflows/mention-in-pr/rwx/action.yml
+++ b/claude-workflows/mention-in-pr/rwx/action.yml
@@ -93,7 +93,7 @@ runs:
         PR_REVIEW_HEAD_SHA: ${{ steps.pr-info.outputs.head_sha }}
         PR_REVIEW_COMMENTS_DIR: /tmp/pr-review-comments
         PR_REVIEW_HELPERS_DIR: ${{ github.action_path }}/../../pr-review/scripts
-      uses: elastic/ai-github-claude-code-action@working-forks
+      uses: elastic/ai-github-claude-code-action@93b29e0893796474092432753830760c396fcf8c
       with:
         claude_code_oauth_token: ${{ inputs.claude-oauth-token }}
         github_token: ${{ inputs.github-token }}
diff --git a/claude-workflows/mention-in-pr/rwxp/action.yml b/claude-workflows/mention-in-pr/rwxp/action.yml
index f21b764a..acb6e0f5 100644
--- a/claude-workflows/mention-in-pr/rwxp/action.yml
+++ b/claude-workflows/mention-in-pr/rwxp/action.yml
@@ -93,7 +93,7 @@ runs:
         PR_REVIEW_HEAD_SHA: ${{ steps.pr-info.outputs.head_sha }}
         PR_REVIEW_COMMENTS_DIR: /tmp/pr-review-comments
         PR_REVIEW_HELPERS_DIR: ${{ github.action_path }}/../../pr-review/scripts
-      uses: elastic/ai-github-claude-code-action@working-forks
+      uses: elastic/ai-github-claude-code-action@93b29e0893796474092432753830760c396fcf8c
       with:
         claude_code_oauth_token: ${{ inputs.claude-oauth-token }}
         github_token: ${{ inputs.github-token }}
diff --git a/claude-workflows/pr-review/ro/action.yml b/claude-workflows/pr-review/ro/action.yml
index bb2ecf1c..a3a797e1 100644
--- a/claude-workflows/pr-review/ro/action.yml
+++ b/claude-workflows/pr-review/ro/action.yml
@@ -102,7 +102,7 @@ runs:
         PR_REVIEW_HELPERS_DIR: ${{ github.action_path }}/../scripts
         PR_REVIEW_MIN_INLINE_SEVERITY: ${{ inputs.minimum-severity }}
         PR_REVIEW_BOT_LOGIN: ${{ steps.bot-identity.outputs.login }}
-      uses: elastic/ai-github-claude-code-action@working-forks
+      uses: elastic/ai-github-claude-code-action@93b29e0893796474092432753830760c396fcf8c
       with:
         claude_code_oauth_token: ${{ inputs.claude-oauth-token }}
         github_token: ${{ inputs.github-token }}
diff --git a/claude-workflows/pr-review/rwx/action.yml b/claude-workflows/pr-review/rwx/action.yml
index 5aaa97ee..81d7ca3f 100644
--- a/claude-workflows/pr-review/rwx/action.yml
+++ b/claude-workflows/pr-review/rwx/action.yml
@@ -102,7 +102,7 @@ runs:
         PR_REVIEW_HELPERS_DIR: ${{ github.action_path }}/../scripts
         PR_REVIEW_MIN_INLINE_SEVERITY: ${{ inputs.minimum-severity }}
         PR_REVIEW_BOT_LOGIN: ${{ steps.bot-identity.outputs.login }}
-      uses: elastic/ai-github-claude-code-action@working-forks
+      uses: elastic/ai-github-claude-code-action@93b29e0893796474092432753830760c396fcf8c
       with:
         claude_code_oauth_token: ${{ inputs.claude-oauth-token }}
         github_token: ${{ inputs.github-token }}
diff --git a/claude-workflows/project-manager/ro/action.yml b/claude-workflows/project-manager/ro/action.yml
index b521552b..678d3df0 100644
--- a/claude-workflows/project-manager/ro/action.yml
+++ b/claude-workflows/project-manager/ro/action.yml
@@ -75,7 +75,7 @@ runs:
       id: claude
       env:
         GITHUB_TOKEN: ${{ inputs.github-token }}
-      uses: elastic/ai-github-claude-code-action@working-forks
+      uses: elastic/ai-github-claude-code-action@93b29e0893796474092432753830760c396fcf8c
       with:
         claude_code_oauth_token: ${{ inputs.claude-oauth-token }}
         github_token: ${{ inputs.github-token }}