diff --git a/.github/workflows/ci-security.yaml b/.github/workflows/ci-security.yaml
index fb95f69..54ebd0f 100644
--- a/.github/workflows/ci-security.yaml
+++ b/.github/workflows/ci-security.yaml
@@ -24,6 +24,6 @@ jobs:
           persist-credentials: false
 
       - name: Run zizmor
-        uses: zizmorcore/zizmor-action@3dc1ecc9bcb9e94e9b2c709687979e1298497054 # v0.6.2
+        uses: zizmorcore/zizmor-action@70fb788f84895a7701f5643d103d587e460b5c99 # v0.6.3
         with:
           advanced-security: false
diff --git a/.github/workflows/real-test.yaml b/.github/workflows/real-test.yaml
index 365143b..5f97108 100644
--- a/.github/workflows/real-test.yaml
+++ b/.github/workflows/real-test.yaml
@@ -21,7 +21,7 @@ jobs:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
-      - uses: ./.github/actions/uvbuild
+      - uses: $/.github/actions/uvbuild
       - name: Replace data in config files
         run: |
           sed -i "s/TEST_GITHUB_ORG/${{ secrets.TEST_GITHUB_ORG }}/g" tests/data/config/org_files/*.yaml
diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml
index dd04980..dad2d0f 100644
--- a/.github/workflows/test.yaml
+++ b/.github/workflows/test.yaml
@@ -34,7 +34,7 @@ jobs:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
-      - uses: ./.github/actions/uvbuild
+      - uses: $/.github/actions/uvbuild
         with:
           python: ${{ matrix.python-version }}
           uv_args: --no-dev
@@ -72,7 +72,7 @@ jobs:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
-      - uses: ./.github/actions/uvbuild
+      - uses: $/.github/actions/uvbuild
       - name: Lint with ruff
         run: uv run ruff check
 
@@ -82,7 +82,7 @@ jobs:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
-      - uses: ./.github/actions/uvbuild
+      - uses: $/.github/actions/uvbuild
       - name: Check formatting with ruff
         run: uv run ruff format --check
   ty:
@@ -91,7 +91,7 @@ jobs:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
-      - uses: ./.github/actions/uvbuild
+      - uses: $/.github/actions/uvbuild
       - name: Test typing with ty
         run: uv run ty check