diff --git a/.github/workflows/bundle-desktop-intel.yml b/.github/workflows/bundle-desktop-intel.yml
index b6b9d714338..ab8208d2d81 100644
--- a/.github/workflows/bundle-desktop-intel.yml
+++ b/.github/workflows/bundle-desktop-intel.yml
@@ -24,7 +24,7 @@ on:
       ref:
         type: string
         required: false
-        default: 'refs/heads/main'
+        default: ''
     secrets:
       CERTIFICATE_OSX_APPLICATION:
         description: 'Certificate for macOS application signing'
diff --git a/.github/workflows/bundle-desktop-linux.yml b/.github/workflows/bundle-desktop-linux.yml
index f31f80b4c42..7bf7a45d80d 100644
--- a/.github/workflows/bundle-desktop-linux.yml
+++ b/.github/workflows/bundle-desktop-linux.yml
@@ -14,7 +14,7 @@ on:
       ref:
         type: string
         required: false
-        default: 'refs/heads/main'
+        default: ''
 
 name: "Bundle Desktop (Linux)"
 
@@ -26,7 +26,7 @@ jobs:
     steps:
       # 1) Check out source
       - name: Checkout repository
-        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # pin@v4
         with:
           ref: ${{ inputs.ref }}
           fetch-depth: 0
@@ -264,4 +264,4 @@ jobs:
           path: |
             ui/desktop/out/make/deb/x64/*.deb
             ui/desktop/out/make/rpm/x64/*.rpm
-          if-no-files-found: error
\ No newline at end of file
+          if-no-files-found: error
diff --git a/.github/workflows/bundle-desktop-windows.yml b/.github/workflows/bundle-desktop-windows.yml
index 37b2cbbf98e..29877fea1dd 100644
--- a/.github/workflows/bundle-desktop-windows.yml
+++ b/.github/workflows/bundle-desktop-windows.yml
@@ -20,7 +20,7 @@ on:
         description: 'Git ref to checkout'
         required: false
         type: string
-        default: 'refs/heads/main'
+        default: ''
     secrets:
       WINDOWS_CODESIGN_CERTIFICATE:
         required: false
@@ -43,7 +43,7 @@ jobs:
     steps:
       # 1) Check out source
       - name: Checkout repository
-        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # pin@v4
         with:
           ref: ${{ inputs.ref }}
           fetch-depth: 0