diff --git a/.github/workflows/build-all.yml b/.github/workflows/build-all.yml
index a7a34b7..8782ffa 100644
--- a/.github/workflows/build-all.yml
+++ b/.github/workflows/build-all.yml
@@ -44,7 +44,7 @@ jobs:
       attestations: write # needed for build provenance attestation
       packages: write # needed for pushing to ghcr.io
       artifact-metadata: write # needed for build provenance attestation
-    uses: bowtie-json-schema/bowtie/.github/workflows/harness-ci.yml@a0ae283dca0a0d0eb2381a886d5499162f33c82a # main
+    uses: bowtie-json-schema/bowtie/.github/workflows/harness-ci.yml@070c3426347080662874b6d646f826a3469e8cde # main
     with:
       ref: ${{ matrix.revision }}
       publish: true
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 5e442d0..ab76f57 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -57,7 +57,7 @@ jobs:
       attestations: write # needed for build provenance attestation
       packages: write # needed for pushing to ghcr.io
       artifact-metadata: write # needed for build provenance attestation
-    uses: bowtie-json-schema/bowtie/.github/workflows/harness-ci.yml@a0ae283dca0a0d0eb2381a886d5499162f33c82a # main
+    uses: bowtie-json-schema/bowtie/.github/workflows/harness-ci.yml@070c3426347080662874b6d646f826a3469e8cde # main
     with:
       # Only publish from pushes to the default branch; PRs build & smoke only.
       publish: ${{ github.event_name == 'push' && github.ref == 'refs/heads/main' }}
diff --git a/.github/workflows/dependabot-build.yml b/.github/workflows/dependabot-build.yml
index 8797f9c..b4c4e1c 100644
--- a/.github/workflows/dependabot-build.yml
+++ b/.github/workflows/dependabot-build.yml
@@ -36,7 +36,7 @@ jobs:
       attestations: write # needed for build provenance attestation
       packages: write # needed for pushing to ghcr.io
       artifact-metadata: write # needed for build provenance attestation
-    uses: bowtie-json-schema/bowtie/.github/workflows/harness-ci.yml@a0ae283dca0a0d0eb2381a886d5499162f33c82a # main
+    uses: bowtie-json-schema/bowtie/.github/workflows/harness-ci.yml@070c3426347080662874b6d646f826a3469e8cde # main
     with:
       ref: ${{ github.event.workflow_run.head_sha }}
       publish: true