diff --git a/.github/workflows/bump_support_rotation.yml b/.github/workflows/bump_support_rotation.yml
index 3b583a1b79..f80d89fffe 100644
--- a/.github/workflows/bump_support_rotation.yml
+++ b/.github/workflows/bump_support_rotation.yml
@@ -20,7 +20,7 @@ jobs:
         run: ./tools/bump_lyft_support_rotation.sh
       - name: Create PR
         id: pr
-        uses: peter-evans/create-pull-request@v3
+        uses: peter-evans/create-pull-request@923ad837f191474af6b1721408744feb989a4c27
         with:
           token: ${{ secrets.CREDENTIALS_GITHUB_PUSH_TOKEN }}
           title: Bump Lyft Support Rotation
diff --git a/.github/workflows/submodule_update.yml b/.github/workflows/submodule_update.yml
index 968ca7fe87..bafca71b22 100644
--- a/.github/workflows/submodule_update.yml
+++ b/.github/workflows/submodule_update.yml
@@ -34,7 +34,7 @@ jobs:
         echo "::set-output name=maintainer::$current"
     - name: Create PR
       if: steps.state.outputs.dirty == 'true'
-      uses: peter-evans/create-pull-request@v3
+      uses: peter-evans/create-pull-request@923ad837f191474af6b1721408744feb989a4c27
       with:
         token: ${{ secrets.CREDENTIALS_GITHUB_PUSH_TOKEN }}
         title: Update Envoy