diff --git a/.github/workflows/anaconda.yml b/.github/workflows/anaconda.yml
index 7c906ec..f2858b9 100644
--- a/.github/workflows/anaconda.yml
+++ b/.github/workflows/anaconda.yml
@@ -72,7 +72,7 @@ jobs:
           fetch-depth: 0
 
       - name: Run the tests
-        uses: sclorg/testing-farm-as-github-action@v1
+        uses: sclorg/testing-farm-as-github-action@82d1bb9fa75376844b25b48d400eb9c5d913ccde # v2
         with:
           compose: RHEL-9.4.0-Nightly
           api_key: ${{ secrets.TF_API_KEY }}
@@ -111,7 +111,7 @@ jobs:
           fetch-depth: 0
 
       - name: Run the tests
-        uses: sclorg/testing-farm-as-github-action@v1
+        uses: sclorg/testing-farm-as-github-action@82d1bb9fa75376844b25b48d400eb9c5d913ccde # v2
         with:
           compose: Fedora-39
           api_key: ${{ secrets.TF_API_KEY }}
@@ -150,7 +150,7 @@ jobs:
           fetch-depth: 0
 
       - name: Run the tests
-        uses: sclorg/testing-farm-as-github-action@v1
+        uses: sclorg/testing-farm-as-github-action@82d1bb9fa75376844b25b48d400eb9c5d913ccde # v2
         with:
           compose: Fedora-39
           api_key: ${{ secrets.TF_API_KEY }}
diff --git a/.github/workflows/bib-image.yml b/.github/workflows/bib-image.yml
index e967443..f197c28 100644
--- a/.github/workflows/bib-image.yml
+++ b/.github/workflows/bib-image.yml
@@ -73,7 +73,7 @@ jobs:
           fetch-depth: 0
 
       - name: Run the tests
-        uses: sclorg/testing-farm-as-github-action@v1
+        uses: sclorg/testing-farm-as-github-action@82d1bb9fa75376844b25b48d400eb9c5d913ccde # v2
         with:
           compose: RHEL-9.4.0-Nightly
           api_key: ${{ secrets.TF_API_KEY }}
@@ -113,7 +113,7 @@ jobs:
           fetch-depth: 0
 
       - name: Run the tests
-        uses: sclorg/testing-farm-as-github-action@v1
+        uses: sclorg/testing-farm-as-github-action@82d1bb9fa75376844b25b48d400eb9c5d913ccde # v2
         with:
           compose: CentOS-Stream-9
           api_key: ${{ secrets.TF_API_KEY }}
@@ -153,7 +153,7 @@ jobs:
           fetch-depth: 0
 
       - name: Run the tests
-        uses: sclorg/testing-farm-as-github-action@v1
+        uses: sclorg/testing-farm-as-github-action@82d1bb9fa75376844b25b48d400eb9c5d913ccde # v2
         with:
           compose: CentOS-Stream-9
           api_key: ${{ secrets.TF_API_KEY }}
diff --git a/.github/workflows/os-replace.yml b/.github/workflows/os-replace.yml
index f74b63c..ca26225 100644
--- a/.github/workflows/os-replace.yml
+++ b/.github/workflows/os-replace.yml
@@ -71,7 +71,7 @@ jobs:
           fetch-depth: 0
 
       - name: Run the tests
-        uses: sclorg/testing-farm-as-github-action@v1
+        uses: sclorg/testing-farm-as-github-action@82d1bb9fa75376844b25b48d400eb9c5d913ccde # v2
         with:
           compose: RHEL-9.4.0-Nightly
           api_key: ${{ secrets.TF_API_KEY }}
@@ -109,7 +109,7 @@ jobs:
           fetch-depth: 0
 
       - name: Run the tests
-        uses: sclorg/testing-farm-as-github-action@v1
+        uses: sclorg/testing-farm-as-github-action@82d1bb9fa75376844b25b48d400eb9c5d913ccde # v2
         with:
           compose: CentOS-Stream-9
           api_key: ${{ secrets.TF_API_KEY }}
@@ -147,7 +147,7 @@ jobs:
           fetch-depth: 0
 
       - name: Run the tests
-        uses: sclorg/testing-farm-as-github-action@v1
+        uses: sclorg/testing-farm-as-github-action@82d1bb9fa75376844b25b48d400eb9c5d913ccde # v2
         with:
           compose: CentOS-Stream-9
           api_key: ${{ secrets.TF_API_KEY }}
diff --git a/.github/workflows/upload_rhel9_ami.yml b/.github/workflows/upload_rhel9_ami.yml
index 5cd37b9..176393f 100644
--- a/.github/workflows/upload_rhel9_ami.yml
+++ b/.github/workflows/upload_rhel9_ami.yml
@@ -9,7 +9,7 @@ on:
 jobs:
   update_ami:
     runs-on: container-runner
-    container: quay.io/fedora/fedora:39
+    container: quay.io/fedora/fedora:41@sha256:220fde50fb85e7bd16ffe12167e91899dfee77bbbd04ff71a4db398866a7a8b5
     steps:
       - name: Install unzip and git
         run: sudo dnf install -y unzip git gh