diff --git a/.github/workflows/build-all.yml b/.github/workflows/build-all.yml
index a7a34b7..21ed212 100644
--- a/.github/workflows/build-all.yml
+++ b/.github/workflows/build-all.yml
@@ -44,7 +44,7 @@ jobs:
       attestations: write # needed for build provenance attestation
       packages: write # needed for pushing to ghcr.io
       artifact-metadata: write # needed for build provenance attestation
-    uses: bowtie-json-schema/bowtie/.github/workflows/harness-ci.yml@a0ae283dca0a0d0eb2381a886d5499162f33c82a # main
+    uses: bowtie-json-schema/bowtie/.github/workflows/harness-ci.yml@9510c9c300c722d32e15710b11cd3c052cdc2bd0 # main
     with:
       ref: ${{ matrix.revision }}
       publish: true
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 52bf5f6..0aca4cd 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -57,7 +57,7 @@ jobs:
       attestations: write # needed for build provenance attestation
       packages: write # needed for pushing to ghcr.io
       artifact-metadata: write # needed for build provenance attestation
-    uses: bowtie-json-schema/bowtie/.github/workflows/harness-ci.yml@a0ae283dca0a0d0eb2381a886d5499162f33c82a # main
+    uses: bowtie-json-schema/bowtie/.github/workflows/harness-ci.yml@9510c9c300c722d32e15710b11cd3c052cdc2bd0 # main
     with:
       # Only publish from pushes to the default branch; PRs build & smoke only.
       publish: ${{ github.event_name == 'push' && github.ref == 'refs/heads/main' }}
diff --git a/.github/workflows/dependabot-build.yml b/.github/workflows/dependabot-build.yml
index 8797f9c..c8e4896 100644
--- a/.github/workflows/dependabot-build.yml
+++ b/.github/workflows/dependabot-build.yml
@@ -36,7 +36,7 @@ jobs:
       attestations: write # needed for build provenance attestation
       packages: write # needed for pushing to ghcr.io
       artifact-metadata: write # needed for build provenance attestation
-    uses: bowtie-json-schema/bowtie/.github/workflows/harness-ci.yml@a0ae283dca0a0d0eb2381a886d5499162f33c82a # main
+    uses: bowtie-json-schema/bowtie/.github/workflows/harness-ci.yml@9510c9c300c722d32e15710b11cd3c052cdc2bd0 # main
     with:
       ref: ${{ github.event.workflow_run.head_sha }}
       publish: true