diff --git a/.github/workflows/bananapi-m1-plus.yml b/.github/workflows/bananapi-m1-plus.yml
index 830e5fbef4..830c6eadd9 100644
--- a/.github/workflows/bananapi-m1-plus.yml
+++ b/.github/workflows/bananapi-m1-plus.yml
@@ -17,7 +17,7 @@ on:
 jobs:
   yocto:
     name: Yocto
-    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@v1.25.26
+    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@a3dfa265480986251193a989b1077939f38c4dc3 # v1.25.26
     # Prevent duplicate workflow executions for pull_request (PR) and pull_request_target (PRT) events.
     # Both PR and PRT will be triggered for the same pull request, whether it is internal or from a fork.
     # This condition will prevent the workflow from running twice for the same pull request while
diff --git a/.github/workflows/beaglebone-ai64.yml b/.github/workflows/beaglebone-ai64.yml
index dff1015170..405dbf058c 100644
--- a/.github/workflows/beaglebone-ai64.yml
+++ b/.github/workflows/beaglebone-ai64.yml
@@ -17,7 +17,7 @@ on:
 jobs:
   yocto:
     name: Yocto
-    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@v1.25.26
+    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@a3dfa265480986251193a989b1077939f38c4dc3 # v1.25.26
     # Prevent duplicate workflow executions for pull_request (PR) and pull_request_target (PRT) events.
     # Both PR and PRT will be triggered for the same pull request, whether it is internal or from a fork.
     # This condition will prevent the workflow from running twice for the same pull request while
diff --git a/.github/workflows/beaglebone-pocket.yml b/.github/workflows/beaglebone-pocket.yml
index 076bbb68fb..51125b1a71 100644
--- a/.github/workflows/beaglebone-pocket.yml
+++ b/.github/workflows/beaglebone-pocket.yml
@@ -17,7 +17,7 @@ on:
 jobs:
   yocto:
     name: Yocto
-    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@v1.25.26
+    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@a3dfa265480986251193a989b1077939f38c4dc3 # v1.25.26
     # Prevent duplicate workflow executions for pull_request (PR) and pull_request_target (PRT) events.
     # Both PR and PRT will be triggered for the same pull request, whether it is internal or from a fork.
     # This condition will prevent the workflow from running twice for the same pull request while
diff --git a/.github/workflows/beaglebone.yml b/.github/workflows/beaglebone.yml
index 6d08337f84..0ef58eb9e6 100644
--- a/.github/workflows/beaglebone.yml
+++ b/.github/workflows/beaglebone.yml
@@ -17,7 +17,7 @@ on:
 jobs:
   yocto:
     name: Yocto
-    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@v1.25.26
+    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@a3dfa265480986251193a989b1077939f38c4dc3 # v1.25.26
     # Prevent duplicate workflow executions for pull_request (PR) and pull_request_target (PRT) events.
     # Both PR and PRT will be triggered for the same pull request, whether it is internal or from a fork.
     # This condition will prevent the workflow from running twice for the same pull request while
diff --git a/.github/workflows/generic-aarch64.yml b/.github/workflows/generic-aarch64.yml
index ce4c98a921..b6eefaa206 100644
--- a/.github/workflows/generic-aarch64.yml
+++ b/.github/workflows/generic-aarch64.yml
@@ -17,7 +17,7 @@ on:
 jobs:
   yocto:
     name: Yocto
-    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@v1.25.26
+    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@a3dfa265480986251193a989b1077939f38c4dc3 # v1.25.26
     # Prevent duplicate workflow executions for pull_request (PR) and pull_request_target (PRT) events.
     # Both PR and PRT will be triggered for the same pull request, whether it is internal or from a fork.
     # This condition will prevent the workflow from running twice for the same pull request while
diff --git a/.github/workflows/generic-amd64.yml b/.github/workflows/generic-amd64.yml
index eb2d778c3e..fbf04a7044 100644
--- a/.github/workflows/generic-amd64.yml
+++ b/.github/workflows/generic-amd64.yml
@@ -19,7 +19,7 @@ jobs:
     name: Yocto
     # FIXME: This workflow has dependencies on scripts in the balena-yocto-scripts repository
     # which is pinned separately as a submodule in the device repo. Expect some drift but try to retain compatibility.
-    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@v1.25.26
+    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@a3dfa265480986251193a989b1077939f38c4dc3 # v1.25.26
     # Prevent duplicate workflow executions for pull_request (PR) and pull_request_target (PRT) events.
     # Both PR and PRT will be triggered for the same pull request, whether it is internal or from a fork.
     # This condition will prevent the workflow from running twice for the same pull request while
diff --git a/.github/workflows/genericx86-64-ext.yml b/.github/workflows/genericx86-64-ext.yml
index 9af5a687df..6742e5a677 100644
--- a/.github/workflows/genericx86-64-ext.yml
+++ b/.github/workflows/genericx86-64-ext.yml
@@ -19,7 +19,7 @@ jobs:
     name: Yocto
     # FIXME: This workflow has dependencies on scripts in the balena-yocto-scripts repository
     # which is pinned separately as a submodule in the device repo. Expect some drift but try to retain compatibility.
-    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@v1.25.26
+    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@a3dfa265480986251193a989b1077939f38c4dc3 # v1.25.26
     # Prevent duplicate workflow executions for pull_request (PR) and pull_request_target (PRT) events.
     # Both PR and PRT will be triggered for the same pull request, whether it is internal or from a fork.
     # This condition will prevent the workflow from running twice for the same pull request while
diff --git a/.github/workflows/genericx86-64.yml b/.github/workflows/genericx86-64.yml
index 5e0c71f506..51d32942c7 100644
--- a/.github/workflows/genericx86-64.yml
+++ b/.github/workflows/genericx86-64.yml
@@ -19,7 +19,7 @@ jobs:
     name: Yocto
     # FIXME: This workflow has dependencies on scripts in the balena-yocto-scripts repository
     # which is pinned separately as a submodule in the device repo. Expect some drift but try to retain compatibility.
-    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@v1.25.26
+    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@a3dfa265480986251193a989b1077939f38c4dc3 # v1.25.26
     # Prevent duplicate workflow executions for pull_request (PR) and pull_request_target (PRT) events.
     # Both PR and PRT will be triggered for the same pull request, whether it is internal or from a fork.
     # This condition will prevent the workflow from running twice for the same pull request while
diff --git a/.github/workflows/imx6ul-var-dart.yml b/.github/workflows/imx6ul-var-dart.yml
index 4c888372df..1725413e77 100644
--- a/.github/workflows/imx6ul-var-dart.yml
+++ b/.github/workflows/imx6ul-var-dart.yml
@@ -17,7 +17,7 @@ on:
 jobs:
   yocto:
     name: Yocto
-    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@v1.25.26
+    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@a3dfa265480986251193a989b1077939f38c4dc3 # v1.25.26
     # Prevent duplicate workflow executions for pull_request (PR) and pull_request_target (PRT) events.
     # Both PR and PRT will be triggered for the same pull request, whether it is internal or from a fork.
     # This condition will prevent the workflow from running twice for the same pull request while
diff --git a/.github/workflows/imx7-var-som.yml b/.github/workflows/imx7-var-som.yml
index d567495739..2fb98af579 100644
--- a/.github/workflows/imx7-var-som.yml
+++ b/.github/workflows/imx7-var-som.yml
@@ -17,7 +17,7 @@ on:
 jobs:
   yocto:
     name: Yocto
-    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@v1.25.26
+    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@a3dfa265480986251193a989b1077939f38c4dc3 # v1.25.26
     # Prevent duplicate workflow executions for pull_request (PR) and pull_request_target (PRT) events.
     # Both PR and PRT will be triggered for the same pull request, whether it is internal or from a fork.
     # This condition will prevent the workflow from running twice for the same pull request while
diff --git a/.github/workflows/iot-gate-imx8.yml b/.github/workflows/iot-gate-imx8.yml
index 786cf5b679..baa8c5771f 100644
--- a/.github/workflows/iot-gate-imx8.yml
+++ b/.github/workflows/iot-gate-imx8.yml
@@ -17,7 +17,7 @@ on:
 jobs:
   yocto:
     name: Yocto
-    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@v1.25.26
+    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@a3dfa265480986251193a989b1077939f38c4dc3 # v1.25.26
     # Prevent duplicate workflow executions for pull_request (PR) and pull_request_target (PRT) events.
     # Both PR and PRT will be triggered for the same pull request, whether it is internal or from a fork.
     # This condition will prevent the workflow from running twice for the same pull request while
diff --git a/.github/workflows/iot-gate-imx8plus.yml b/.github/workflows/iot-gate-imx8plus.yml
index 65de887e9a..54ff3dd762 100644
--- a/.github/workflows/iot-gate-imx8plus.yml
+++ b/.github/workflows/iot-gate-imx8plus.yml
@@ -17,7 +17,7 @@ on:
 jobs:
   yocto:
     name: Yocto
-    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@v1.25.26
+    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@a3dfa265480986251193a989b1077939f38c4dc3 # v1.25.26
     # Prevent duplicate workflow executions for pull_request (PR) and pull_request_target (PRT) events.
     # Both PR and PRT will be triggered for the same pull request, whether it is internal or from a fork.
     # This condition will prevent the workflow from running twice for the same pull request while
diff --git a/.github/workflows/jetson-agx-orin-devkit.yml b/.github/workflows/jetson-agx-orin-devkit.yml
index 74a6718e41..cb72507212 100644
--- a/.github/workflows/jetson-agx-orin-devkit.yml
+++ b/.github/workflows/jetson-agx-orin-devkit.yml
@@ -17,7 +17,7 @@ on:
 jobs:
   yocto:
     name: Yocto
-    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@v1.25.26
+    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@a3dfa265480986251193a989b1077939f38c4dc3 # v1.25.26
     # Prevent duplicate workflow executions for pull_request (PR) and pull_request_target (PRT) events.
     # Both PR and PRT will be triggered for the same pull request, whether it is internal or from a fork.
     # This condition will prevent the workflow from running twice for the same pull request while
diff --git a/.github/workflows/jetson-nano.yml b/.github/workflows/jetson-nano.yml
index c362f004df..36f97a6852 100644
--- a/.github/workflows/jetson-nano.yml
+++ b/.github/workflows/jetson-nano.yml
@@ -17,7 +17,7 @@ on:
 jobs:
   yocto:
     name: Yocto
-    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@v1.25.26
+    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@a3dfa265480986251193a989b1077939f38c4dc3 # v1.25.26
     # Prevent duplicate workflow executions for pull_request (PR) and pull_request_target (PRT) events.
     # Both PR and PRT will be triggered for the same pull request, whether it is internal or from a fork.
     # This condition will prevent the workflow from running twice for the same pull request while
diff --git a/.github/workflows/jetson-tx2.yml b/.github/workflows/jetson-tx2.yml
index 3c65ba51b2..0e2412ef4b 100644
--- a/.github/workflows/jetson-tx2.yml
+++ b/.github/workflows/jetson-tx2.yml
@@ -17,7 +17,7 @@ on:
 jobs:
   yocto:
     name: Yocto
-    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@v1.25.26
+    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@a3dfa265480986251193a989b1077939f38c4dc3 # v1.25.26
     # Prevent duplicate workflow executions for pull_request (PR) and pull_request_target (PRT) events.
     # Both PR and PRT will be triggered for the same pull request, whether it is internal or from a fork.
     # This condition will prevent the workflow from running twice for the same pull request while
diff --git a/.github/workflows/jetson-xavier.yml b/.github/workflows/jetson-xavier.yml
index 021dfb7117..c7b7a00489 100644
--- a/.github/workflows/jetson-xavier.yml
+++ b/.github/workflows/jetson-xavier.yml
@@ -17,7 +17,7 @@ on:
 jobs:
   yocto:
     name: Yocto
-    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@v1.25.26
+    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@a3dfa265480986251193a989b1077939f38c4dc3 # v1.25.26
     # Prevent duplicate workflow executions for pull_request (PR) and pull_request_target (PRT) events.
     # Both PR and PRT will be triggered for the same pull request, whether it is internal or from a fork.
     # This condition will prevent the workflow from running twice for the same pull request while
diff --git a/.github/workflows/nanopi-neo-air.yml b/.github/workflows/nanopi-neo-air.yml
index 3ca77ff687..36ae8b9ee8 100644
--- a/.github/workflows/nanopi-neo-air.yml
+++ b/.github/workflows/nanopi-neo-air.yml
@@ -17,7 +17,7 @@ on:
 jobs:
   yocto:
     name: Yocto
-    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@v1.25.26
+    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@a3dfa265480986251193a989b1077939f38c4dc3 # v1.25.26
     # Prevent duplicate workflow executions for pull_request (PR) and pull_request_target (PRT) events.
     # Both PR and PRT will be triggered for the same pull request, whether it is internal or from a fork.
     # This condition will prevent the workflow from running twice for the same pull request while
diff --git a/.github/workflows/nanopi-r2c.yml b/.github/workflows/nanopi-r2c.yml
index d279efc383..4ed35f20bd 100644
--- a/.github/workflows/nanopi-r2c.yml
+++ b/.github/workflows/nanopi-r2c.yml
@@ -17,7 +17,7 @@ on:
 jobs:
   yocto:
     name: Yocto
-    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@v1.25.26
+    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@a3dfa265480986251193a989b1077939f38c4dc3 # v1.25.26
     # Prevent duplicate workflow executions for pull_request (PR) and pull_request_target (PRT) events.
     # Both PR and PRT will be triggered for the same pull request, whether it is internal or from a fork.
     # This condition will prevent the workflow from running twice for the same pull request while
diff --git a/.github/workflows/orangepi-plus2.yml b/.github/workflows/orangepi-plus2.yml
index 8110526fee..2dc0ba05c9 100644
--- a/.github/workflows/orangepi-plus2.yml
+++ b/.github/workflows/orangepi-plus2.yml
@@ -17,7 +17,7 @@ on:
 jobs:
   yocto:
     name: Yocto
-    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@v1.25.26
+    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@a3dfa265480986251193a989b1077939f38c4dc3 # v1.25.26
     # Prevent duplicate workflow executions for pull_request (PR) and pull_request_target (PRT) events.
     # Both PR and PRT will be triggered for the same pull request, whether it is internal or from a fork.
     # This condition will prevent the workflow from running twice for the same pull request while
diff --git a/.github/workflows/owa5x.yml b/.github/workflows/owa5x.yml
index 756c197b67..424a436384 100644
--- a/.github/workflows/owa5x.yml
+++ b/.github/workflows/owa5x.yml
@@ -17,7 +17,7 @@ on:
 jobs:
   yocto:
     name: Yocto
-    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@v1.25.26
+    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@a3dfa265480986251193a989b1077939f38c4dc3 # v1.25.26
     # Prevent duplicate workflow executions for pull_request (PR) and pull_request_target (PRT) events.
     # Both PR and PRT will be triggered for the same pull request, whether it is internal or from a fork.
     # This condition will prevent the workflow from running twice for the same pull request while
diff --git a/.github/workflows/raspberrypi.yml b/.github/workflows/raspberrypi.yml
index 2a8aa529f7..7eb77e52e0 100644
--- a/.github/workflows/raspberrypi.yml
+++ b/.github/workflows/raspberrypi.yml
@@ -17,7 +17,7 @@ on:
 jobs:
   yocto:
     name: Yocto
-    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@v1.25.26
+    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@a3dfa265480986251193a989b1077939f38c4dc3 # v1.25.26
     # Prevent duplicate workflow executions for pull_request (PR) and pull_request_target (PRT) events.
     # Both PR and PRT will be triggered for the same pull request, whether it is internal or from a fork.
     # This condition will prevent the workflow from running twice for the same pull request while
diff --git a/.github/workflows/raspberrypi2.yml b/.github/workflows/raspberrypi2.yml
index 70029b9a18..158ee75b5e 100644
--- a/.github/workflows/raspberrypi2.yml
+++ b/.github/workflows/raspberrypi2.yml
@@ -17,7 +17,7 @@ on:
 jobs:
   yocto:
     name: Yocto
-    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@v1.25.26
+    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@a3dfa265480986251193a989b1077939f38c4dc3 # v1.25.26
     # Prevent duplicate workflow executions for pull_request (PR) and pull_request_target (PRT) events.
     # Both PR and PRT will be triggered for the same pull request, whether it is internal or from a fork.
     # This condition will prevent the workflow from running twice for the same pull request while
diff --git a/.github/workflows/raspberrypi3-64.yml b/.github/workflows/raspberrypi3-64.yml
index 37a670e587..344fa891af 100644
--- a/.github/workflows/raspberrypi3-64.yml
+++ b/.github/workflows/raspberrypi3-64.yml
@@ -19,7 +19,7 @@ jobs:
     name: Yocto
     # FIXME: This workflow has dependencies on scripts in the balena-yocto-scripts repository
     # which is pinned separately as a submodule in the device repo. Expect some drift but try to retain compatibility.
-    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@v1.25.26
+    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@a3dfa265480986251193a989b1077939f38c4dc3 # v1.25.26
     # Prevent duplicate workflow executions for pull_request (PR) and pull_request_target (PRT) events.
     # Both PR and PRT will be triggered for the same pull request, whether it is internal or from a fork.
     # This condition will prevent the workflow from running twice for the same pull request while
diff --git a/.github/workflows/raspberrypi3.yml b/.github/workflows/raspberrypi3.yml
index 6075583c22..900e4d2f0d 100644
--- a/.github/workflows/raspberrypi3.yml
+++ b/.github/workflows/raspberrypi3.yml
@@ -19,7 +19,7 @@ jobs:
     name: Yocto
     # FIXME: This workflow has dependencies on scripts in the balena-yocto-scripts repository
     # which is pinned separately as a submodule in the device repo. Expect some drift but try to retain compatibility.
-    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@v1.25.26
+    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@a3dfa265480986251193a989b1077939f38c4dc3 # v1.25.26
     # Prevent duplicate workflow executions for pull_request (PR) and pull_request_target (PRT) events.
     # Both PR and PRT will be triggered for the same pull request, whether it is internal or from a fork.
     # This condition will prevent the workflow from running twice for the same pull request while
diff --git a/.github/workflows/raspberrypi4-64.yml b/.github/workflows/raspberrypi4-64.yml
index bc4dbaac71..2bde276c56 100644
--- a/.github/workflows/raspberrypi4-64.yml
+++ b/.github/workflows/raspberrypi4-64.yml
@@ -19,7 +19,7 @@ jobs:
     name: Yocto
     # FIXME: This workflow has dependencies on scripts in the balena-yocto-scripts repository
     # which is pinned separately as a submodule in the device repo. Expect some drift but try to retain compatibility.
-    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@v1.25.26
+    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@a3dfa265480986251193a989b1077939f38c4dc3 # v1.25.26
     # Prevent duplicate workflow executions for pull_request (PR) and pull_request_target (PRT) events.
     # Both PR and PRT will be triggered for the same pull request, whether it is internal or from a fork.
     # This condition will prevent the workflow from running twice for the same pull request while
diff --git a/.github/workflows/revpi-connect-4.yml b/.github/workflows/revpi-connect-4.yml
index 3b86adcfd3..8f150486b8 100644
--- a/.github/workflows/revpi-connect-4.yml
+++ b/.github/workflows/revpi-connect-4.yml
@@ -17,7 +17,7 @@ on:
 jobs:
   yocto:
     name: Yocto
-    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@v1.25.26
+    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@a3dfa265480986251193a989b1077939f38c4dc3 # v1.25.26
     # Prevent duplicate workflow executions for pull_request (PR) and pull_request_target (PRT) events.
     # Both PR and PRT will be triggered for the same pull request, whether it is internal or from a fork.
     # This condition will prevent the workflow from running twice for the same pull request while
diff --git a/.github/workflows/revpi-connect-s.yml b/.github/workflows/revpi-connect-s.yml
index 4728f180b4..474a41340a 100644
--- a/.github/workflows/revpi-connect-s.yml
+++ b/.github/workflows/revpi-connect-s.yml
@@ -17,7 +17,7 @@ on:
 jobs:
   yocto:
     name: Yocto
-    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@v1.25.26
+    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@a3dfa265480986251193a989b1077939f38c4dc3 # v1.25.26
     # Prevent duplicate workflow executions for pull_request (PR) and pull_request_target (PRT) events.
     # Both PR and PRT will be triggered for the same pull request, whether it is internal or from a fork.
     # This condition will prevent the workflow from running twice for the same pull request while
diff --git a/.github/workflows/revpi-connect.yml b/.github/workflows/revpi-connect.yml
index 97b5eeddc1..ca642d4556 100644
--- a/.github/workflows/revpi-connect.yml
+++ b/.github/workflows/revpi-connect.yml
@@ -17,7 +17,7 @@ on:
 jobs:
   yocto:
     name: Yocto
-    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@v1.25.26
+    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@a3dfa265480986251193a989b1077939f38c4dc3 # v1.25.26
     # Prevent duplicate workflow executions for pull_request (PR) and pull_request_target (PRT) events.
     # Both PR and PRT will be triggered for the same pull request, whether it is internal or from a fork.
     # This condition will prevent the workflow from running twice for the same pull request while
diff --git a/.github/workflows/revpi-core-3.yml b/.github/workflows/revpi-core-3.yml
index ca600b1c00..9f42a2a569 100644
--- a/.github/workflows/revpi-core-3.yml
+++ b/.github/workflows/revpi-core-3.yml
@@ -17,7 +17,7 @@ on:
 jobs:
   yocto:
     name: Yocto
-    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@v1.25.26
+    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@a3dfa265480986251193a989b1077939f38c4dc3 # v1.25.26
     # Prevent duplicate workflow executions for pull_request (PR) and pull_request_target (PRT) events.
     # Both PR and PRT will be triggered for the same pull request, whether it is internal or from a fork.
     # This condition will prevent the workflow from running twice for the same pull request while
diff --git a/.github/workflows/rockpi-4b-rk3399.yml b/.github/workflows/rockpi-4b-rk3399.yml
index 5ae8b8cdc8..c742508a36 100644
--- a/.github/workflows/rockpi-4b-rk3399.yml
+++ b/.github/workflows/rockpi-4b-rk3399.yml
@@ -17,7 +17,7 @@ on:
 jobs:
   yocto:
     name: Yocto
-    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@v1.25.26
+    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@a3dfa265480986251193a989b1077939f38c4dc3 # v1.25.26
     # Prevent duplicate workflow executions for pull_request (PR) and pull_request_target (PRT) events.
     # Both PR and PRT will be triggered for the same pull request, whether it is internal or from a fork.
     # This condition will prevent the workflow from running twice for the same pull request while
diff --git a/.github/workflows/surface-go.yml b/.github/workflows/surface-go.yml
index 8d681a5d46..8d07e24519 100644
--- a/.github/workflows/surface-go.yml
+++ b/.github/workflows/surface-go.yml
@@ -17,7 +17,7 @@ on:
 jobs:
   yocto:
     name: Yocto
-    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@v1.25.26
+    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@a3dfa265480986251193a989b1077939f38c4dc3 # v1.25.26
     # Prevent duplicate workflow executions for pull_request (PR) and pull_request_target (PRT) events.
     # Both PR and PRT will be triggered for the same pull request, whether it is internal or from a fork.
     # This condition will prevent the workflow from running twice for the same pull request while
diff --git a/.github/workflows/surface-pro-6.yml b/.github/workflows/surface-pro-6.yml
index 571aee6296..f3a7c31ff0 100644
--- a/.github/workflows/surface-pro-6.yml
+++ b/.github/workflows/surface-pro-6.yml
@@ -17,7 +17,7 @@ on:
 jobs:
   yocto:
     name: Yocto
-    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@v1.25.26
+    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@a3dfa265480986251193a989b1077939f38c4dc3 # v1.25.26
     # Prevent duplicate workflow executions for pull_request (PR) and pull_request_target (PRT) events.
     # Both PR and PRT will be triggered for the same pull request, whether it is internal or from a fork.
     # This condition will prevent the workflow from running twice for the same pull request while
diff --git a/.github/workflows/var-som-mx6..yml b/.github/workflows/var-som-mx6..yml
index 55bda96d0b..da52e1e3a1 100644
--- a/.github/workflows/var-som-mx6..yml
+++ b/.github/workflows/var-som-mx6..yml
@@ -17,7 +17,7 @@ on:
 jobs:
   yocto:
     name: Yocto
-    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@v1.25.26
+    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@a3dfa265480986251193a989b1077939f38c4dc3 # v1.25.26
     # Prevent duplicate workflow executions for pull_request (PR) and pull_request_target (PRT) events.
     # Both PR and PRT will be triggered for the same pull request, whether it is internal or from a fork.
     # This condition will prevent the workflow from running twice for the same pull request while