diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index d5300149167..f469bbb2d91 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -28,8 +28,8 @@ jobs:
   lint:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
-      - uses: actions/setup-go@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b # v5
+      - uses: actions/checkout@v4.2.2
+      - uses: actions/setup-go@v5.4.0
         with:
           go-version-file: go.mod
           cache: false
@@ -48,8 +48,8 @@ jobs:
         os: ['macos-latest', 'ubuntu-latest', 'windows-latest']
     runs-on: ${{ matrix.os }}
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
-      - uses: actions/setup-go@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b # v5
+      - uses: actions/checkout@v4.2.2
+      - uses: actions/setup-go@v5.4.0
         with:
           go-version-file: go.mod
           cache: false
@@ -92,8 +92,8 @@ jobs:
   test-fips:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
-      - uses: actions/setup-go@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b # v5
+      - uses: actions/checkout@v4.2.2
+      - uses: actions/setup-go@v5.4.0
         with:
           go-version-file: go.mod
           cache: false
@@ -112,8 +112,8 @@ jobs:
   system-test:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
-      - uses: actions/setup-go@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b # v5
+      - uses: actions/checkout@v4.2.2
+      - uses: actions/setup-go@v5.4.0
         with:
           go-version-file: systemtest/go.mod
           cache: false
@@ -133,8 +133,8 @@ jobs:
   system-test-fips:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-go@v5
+      - uses: actions/checkout@v4.2.2
+      - uses: actions/setup-go@v5.4.0
         with:
           go-version-file: systemtest/go.mod
           cache: false
@@ -156,8 +156,8 @@ jobs:
   test-package:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
-      - uses: actions/setup-go@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b # v5
+      - uses: actions/checkout@v4.2.2
+      - uses: actions/setup-go@v5.4.0
         with:
           go-version-file: go.mod
           cache: false
@@ -194,10 +194,10 @@ jobs:
     runs-on: ubuntu-latest
     if: ( github.event_name == 'pull_request' && github.event.pull_request.head.repo.fork == true ) || github.actor == 'dependabot[bot]'
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v4.2.2
       - name: Get changed files
         id: changed-files
-        uses: tj-actions/changed-files@9934ab3fdf63239da75d9e0fbd339c48620c72c4 # v45.0.7
+        uses: tj-actions/changed-files@ed68ef82c095e0d48ec87eccea555d944a631a4c # v46.0.5
         with:
           files: .go-version
 
diff --git a/.github/workflows/prepare-release/action.yml b/.github/workflows/prepare-release/action.yml
index b895d22599d..6cb48c188b5 100644
--- a/.github/workflows/prepare-release/action.yml
+++ b/.github/workflows/prepare-release/action.yml
@@ -32,7 +32,7 @@ runs:
   steps:
     - name: Send slack message when started
       id: slack-thread
-      uses: elastic/oblt-actions/slack/send@31e93d1dfb82adc106fc7820f505db1afefe43b1 # v1
+      uses: elastic/oblt-actions/slack/send@v1
       with:
         bot-token: ${{ inputs.slack-bot-token }}
         channel-id: ${{ env.SLACK_CHANNEL }}
@@ -109,7 +109,7 @@ runs:
         TAG: 'refs/tags/v${{ steps.generate.outputs.release-version }}'
 
     - if: failure()
-      uses: elastic/oblt-actions/slack/send@31e93d1dfb82adc106fc7820f505db1afefe43b1 # v1
+      uses: elastic/oblt-actions/slack/send@v1
       with:
         bot-token: ${{ inputs.slack-bot-token }}
         channel-id: ${{ env.SLACK_CHANNEL }}
diff --git a/.github/workflows/smoke-test-ess-action/action.yml b/.github/workflows/smoke-test-ess-action/action.yml
index 0aab8c2781d..90893ddca19 100644
--- a/.github/workflows/smoke-test-ess-action/action.yml
+++ b/.github/workflows/smoke-test-ess-action/action.yml
@@ -24,9 +24,9 @@ runs:
     - name: Setup cluster env
       uses: ./.github/workflows/setup-cluster-env
 
-    - uses: elastic/oblt-actions/aws/auth@31e93d1dfb82adc106fc7820f505db1afefe43b1 # v1
+    - uses: elastic/oblt-actions/aws/auth@v1
 
-    - uses: elastic/oblt-actions/google/auth@31e93d1dfb82adc106fc7820f505db1afefe43b1 # v1
+    - uses: elastic/oblt-actions/google/auth@v1
 
     - uses: google-github-actions/get-secretmanager-secrets@a8440875e1c2892062aef9061228d4f1af8f919b # v2.2.3
       with: