diff --git a/.github/workflows/subsplit-client.yaml b/.github/workflows/subsplit-client.yaml
index 6a86bb5..94b34ae 100644
--- a/.github/workflows/subsplit-client.yaml
+++ b/.github/workflows/subsplit-client.yaml
@@ -17,5 +17,5 @@ jobs:
         with:
           fetch-depth: '0'
           persist-credentials: 'false'
-      - uses: "ramsey/composer-install@v2"
+      - uses: "ramsey/composer-install@1919f6c305aea6ab10e6181a8ddf72317ad77e0e" # 2.3.1
       - run: make generate-example-client-subsplit
diff --git a/.github/workflows/test-client.yaml b/.github/workflows/test-client.yaml
index aec9b77..6903ded 100644
--- a/.github/workflows/test-client.yaml
+++ b/.github/workflows/test-client.yaml
@@ -17,7 +17,7 @@ jobs:
         with:
           fetch-depth: '0'
           persist-credentials: 'false'
-      - uses: "ramsey/composer-install@v2"
+      - uses: "ramsey/composer-install@1919f6c305aea6ab10e6181a8ddf72317ad77e0e" # 2.3.1
       - run: make generate-example-client-${{ inputs.name }}
       - name: Tar example files
         run: tar -czf example.tar ./example
@@ -87,7 +87,7 @@ jobs:
           path: ./
       - name: UnTar example files
         run: tar -xzf example.tar
-      - uses: ramsey/composer-install@v2
+      - uses: ramsey/composer-install@1919f6c305aea6ab10e6181a8ddf72317ad77e0e # 2.3.1
         with:
           working-directory: "example/generated-${{ inputs.name }}/"
           ignore-cache: "yes"