diff --git a/.github/workflows/npe-x500-m3.yml b/.github/workflows/npe-x500-m3.yml
index adfb76f30..4485b309d 100644
--- a/.github/workflows/npe-x500-m3.yml
+++ b/.github/workflows/npe-x500-m3.yml
@@ -34,7 +34,7 @@ on:
 jobs:
   yocto:
     name: Yocto
-    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@v1.25.47
+    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@9646cf9ad0f3c6ac4b2ce11e0ef21b8fa9276149 # v1.25.47
     # Prevent duplicate workflow executions for pull_request (PR) and pull_request_target (PRT) events.
     # Both PR and PRT will be triggered for the same pull request, whether it is internal or from a fork.
     # This condition will prevent the workflow from running twice for the same pull request while
diff --git a/.github/workflows/raspberrypi.yml b/.github/workflows/raspberrypi.yml
index 67bae6d42..f19c88594 100644
--- a/.github/workflows/raspberrypi.yml
+++ b/.github/workflows/raspberrypi.yml
@@ -35,7 +35,7 @@ on:
 jobs:
   yocto:
     name: Yocto
-    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@v1.25.47
+    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@9646cf9ad0f3c6ac4b2ce11e0ef21b8fa9276149 # v1.25.47
     # Prevent duplicate workflow executions for pull_request (PR) and pull_request_target (PRT) events.
     # Both PR and PRT will be triggered for the same pull request, whether it is internal or from a fork.
     # This condition will prevent the workflow from running twice for the same pull request while
diff --git a/.github/workflows/raspberrypi0-2w-64.yml b/.github/workflows/raspberrypi0-2w-64.yml
index e0cfa49bf..280ada5bb 100644
--- a/.github/workflows/raspberrypi0-2w-64.yml
+++ b/.github/workflows/raspberrypi0-2w-64.yml
@@ -35,7 +35,7 @@ on:
 jobs:
   yocto:
     name: Yocto
-    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@v1.25.47
+    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@9646cf9ad0f3c6ac4b2ce11e0ef21b8fa9276149 # v1.25.47
     # Prevent duplicate workflow executions for pull_request (PR) and pull_request_target (PRT) events.
     # Both PR and PRT will be triggered for the same pull request, whether it is internal or from a fork.
     # This condition will prevent the workflow from running twice for the same pull request while
diff --git a/.github/workflows/raspberrypi2.yml b/.github/workflows/raspberrypi2.yml
index 3678a50be..525d8acff 100644
--- a/.github/workflows/raspberrypi2.yml
+++ b/.github/workflows/raspberrypi2.yml
@@ -35,7 +35,7 @@ on:
 jobs:
   yocto:
     name: Yocto
-    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@v1.25.47
+    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@9646cf9ad0f3c6ac4b2ce11e0ef21b8fa9276149 # v1.25.47
     # Prevent duplicate workflow executions for pull_request (PR) and pull_request_target (PRT) events.
     # Both PR and PRT will be triggered for the same pull request, whether it is internal or from a fork.
     # This condition will prevent the workflow from running twice for the same pull request while
diff --git a/.github/workflows/raspberrypi3-64.yml b/.github/workflows/raspberrypi3-64.yml
index d908edfe5..b8549dcdc 100644
--- a/.github/workflows/raspberrypi3-64.yml
+++ b/.github/workflows/raspberrypi3-64.yml
@@ -35,7 +35,7 @@ on:
 jobs:
   yocto:
     name: Yocto
-    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@v1.25.47
+    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@9646cf9ad0f3c6ac4b2ce11e0ef21b8fa9276149 # v1.25.47
     # Prevent duplicate workflow executions for pull_request (PR) and pull_request_target (PRT) events.
     # Both PR and PRT will be triggered for the same pull request, whether it is internal or from a fork.
     # This condition will prevent the workflow from running twice for the same pull request while
diff --git a/.github/workflows/raspberrypi3-unipi-neuron.yml b/.github/workflows/raspberrypi3-unipi-neuron.yml
index e57889f12..9d623f071 100644
--- a/.github/workflows/raspberrypi3-unipi-neuron.yml
+++ b/.github/workflows/raspberrypi3-unipi-neuron.yml
@@ -35,7 +35,7 @@ on:
 jobs:
   yocto:
     name: Yocto
-    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@v1.25.47
+    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@9646cf9ad0f3c6ac4b2ce11e0ef21b8fa9276149 # v1.25.47
     # Prevent duplicate workflow executions for pull_request (PR) and pull_request_target (PRT) events.
     # Both PR and PRT will be triggered for the same pull request, whether it is internal or from a fork.
     # This condition will prevent the workflow from running twice for the same pull request while
diff --git a/.github/workflows/raspberrypi3.yml b/.github/workflows/raspberrypi3.yml
index 7484c74d5..4ffbaa832 100644
--- a/.github/workflows/raspberrypi3.yml
+++ b/.github/workflows/raspberrypi3.yml
@@ -35,7 +35,7 @@ on:
 jobs:
   yocto:
     name: Yocto
-    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@v1.25.47
+    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@9646cf9ad0f3c6ac4b2ce11e0ef21b8fa9276149 # v1.25.47
     # Prevent duplicate workflow executions for pull_request (PR) and pull_request_target (PRT) events.
     # Both PR and PRT will be triggered for the same pull request, whether it is internal or from a fork.
     # This condition will prevent the workflow from running twice for the same pull request while
diff --git a/.github/workflows/raspberrypi4-64.yml b/.github/workflows/raspberrypi4-64.yml
index 3d225688d..47c8a1e69 100644
--- a/.github/workflows/raspberrypi4-64.yml
+++ b/.github/workflows/raspberrypi4-64.yml
@@ -35,7 +35,7 @@ on:
 jobs:
   yocto:
     name: Yocto
-    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@v1.25.47
+    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@9646cf9ad0f3c6ac4b2ce11e0ef21b8fa9276149 # v1.25.47
     # Prevent duplicate workflow executions for pull_request (PR) and pull_request_target (PRT) events.
     # Both PR and PRT will be triggered for the same pull request, whether it is internal or from a fork.
     # This condition will prevent the workflow from running twice for the same pull request while
diff --git a/.github/workflows/raspberrypi4-superhub.yml b/.github/workflows/raspberrypi4-superhub.yml
index f8f82e54b..f7dcb61b8 100644
--- a/.github/workflows/raspberrypi4-superhub.yml
+++ b/.github/workflows/raspberrypi4-superhub.yml
@@ -35,7 +35,7 @@ on:
 jobs:
   yocto:
     name: Yocto
-    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@v1.25.47
+    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@9646cf9ad0f3c6ac4b2ce11e0ef21b8fa9276149 # v1.25.47
     # Prevent duplicate workflow executions for pull_request (PR) and pull_request_target (PRT) events.
     # Both PR and PRT will be triggered for the same pull request, whether it is internal or from a fork.
     # This condition will prevent the workflow from running twice for the same pull request while
diff --git a/.github/workflows/raspberrypi4-unipi-neuron.yml b/.github/workflows/raspberrypi4-unipi-neuron.yml
index ec91e5f37..497c59374 100644
--- a/.github/workflows/raspberrypi4-unipi-neuron.yml
+++ b/.github/workflows/raspberrypi4-unipi-neuron.yml
@@ -35,7 +35,7 @@ on:
 jobs:
   yocto:
     name: Yocto
-    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@v1.25.47
+    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@9646cf9ad0f3c6ac4b2ce11e0ef21b8fa9276149 # v1.25.47
     # Prevent duplicate workflow executions for pull_request (PR) and pull_request_target (PRT) events.
     # Both PR and PRT will be triggered for the same pull request, whether it is internal or from a fork.
     # This condition will prevent the workflow from running twice for the same pull request while
diff --git a/.github/workflows/raspberrypi400-64.yml b/.github/workflows/raspberrypi400-64.yml
index 4c4613ad3..30ace4e47 100644
--- a/.github/workflows/raspberrypi400-64.yml
+++ b/.github/workflows/raspberrypi400-64.yml
@@ -35,7 +35,7 @@ on:
 jobs:
   yocto:
     name: Yocto
-    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@v1.25.47
+    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@9646cf9ad0f3c6ac4b2ce11e0ef21b8fa9276149 # v1.25.47
     # Prevent duplicate workflow executions for pull_request (PR) and pull_request_target (PRT) events.
     # Both PR and PRT will be triggered for the same pull request, whether it is internal or from a fork.
     # This condition will prevent the workflow from running twice for the same pull request while
diff --git a/.github/workflows/raspberrypi5.yml b/.github/workflows/raspberrypi5.yml
index 766658bd2..8389f8f5e 100644
--- a/.github/workflows/raspberrypi5.yml
+++ b/.github/workflows/raspberrypi5.yml
@@ -35,7 +35,7 @@ on:
 jobs:
   yocto:
     name: Yocto
-    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@v1.25.47
+    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@9646cf9ad0f3c6ac4b2ce11e0ef21b8fa9276149 # v1.25.47
     # Prevent duplicate workflow executions for pull_request (PR) and pull_request_target (PRT) events.
     # Both PR and PRT will be triggered for the same pull request, whether it is internal or from a fork.
     # This condition will prevent the workflow from running twice for the same pull request while
diff --git a/.github/workflows/raspberrypicm4-ioboard.yml b/.github/workflows/raspberrypicm4-ioboard.yml
index 89ba9b1df..23917987f 100644
--- a/.github/workflows/raspberrypicm4-ioboard.yml
+++ b/.github/workflows/raspberrypicm4-ioboard.yml
@@ -35,7 +35,7 @@ on:
 jobs:
   yocto:
     name: Yocto
-    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@v1.25.47
+    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@9646cf9ad0f3c6ac4b2ce11e0ef21b8fa9276149 # v1.25.47
     # Prevent duplicate workflow executions for pull_request (PR) and pull_request_target (PRT) events.
     # Both PR and PRT will be triggered for the same pull request, whether it is internal or from a fork.
     # This condition will prevent the workflow from running twice for the same pull request while
diff --git a/.github/workflows/revpi-connect-4.yml b/.github/workflows/revpi-connect-4.yml
index f0ad74d19..3f27e698c 100644
--- a/.github/workflows/revpi-connect-4.yml
+++ b/.github/workflows/revpi-connect-4.yml
@@ -35,7 +35,7 @@ on:
 jobs:
   yocto:
     name: Yocto
-    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@v1.25.47
+    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@9646cf9ad0f3c6ac4b2ce11e0ef21b8fa9276149 # v1.25.47
     # Prevent duplicate workflow executions for pull_request (PR) and pull_request_target (PRT) events.
     # Both PR and PRT will be triggered for the same pull request, whether it is internal or from a fork.
     # This condition will prevent the workflow from running twice for the same pull request while
diff --git a/.github/workflows/revpi-connect-s.yml b/.github/workflows/revpi-connect-s.yml
index fe6e1adf5..15e16ceb6 100644
--- a/.github/workflows/revpi-connect-s.yml
+++ b/.github/workflows/revpi-connect-s.yml
@@ -35,7 +35,7 @@ on:
 jobs:
   yocto:
     name: Yocto
-    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@v1.25.47
+    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@9646cf9ad0f3c6ac4b2ce11e0ef21b8fa9276149 # v1.25.47
     # Prevent duplicate workflow executions for pull_request (PR) and pull_request_target (PRT) events.
     # Both PR and PRT will be triggered for the same pull request, whether it is internal or from a fork.
     # This condition will prevent the workflow from running twice for the same pull request while
diff --git a/.github/workflows/revpi-connect.yml b/.github/workflows/revpi-connect.yml
index 67434e8fb..598c95d17 100644
--- a/.github/workflows/revpi-connect.yml
+++ b/.github/workflows/revpi-connect.yml
@@ -35,7 +35,7 @@ on:
 jobs:
   yocto:
     name: Yocto
-    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@v1.25.47
+    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@9646cf9ad0f3c6ac4b2ce11e0ef21b8fa9276149 # v1.25.47
     # Prevent duplicate workflow executions for pull_request (PR) and pull_request_target (PRT) events.
     # Both PR and PRT will be triggered for the same pull request, whether it is internal or from a fork.
     # This condition will prevent the workflow from running twice for the same pull request while
diff --git a/.github/workflows/revpi-core-3.yml b/.github/workflows/revpi-core-3.yml
index 820a1faf1..efd6837c1 100644
--- a/.github/workflows/revpi-core-3.yml
+++ b/.github/workflows/revpi-core-3.yml
@@ -34,7 +34,7 @@ on:
 jobs:
   yocto:
     name: Yocto
-    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@v1.25.47
+    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@9646cf9ad0f3c6ac4b2ce11e0ef21b8fa9276149 # v1.25.47
     # Prevent duplicate workflow executions for pull_request (PR) and pull_request_target (PRT) events.
     # Both PR and PRT will be triggered for the same pull request, whether it is internal or from a fork.
     # This condition will prevent the workflow from running twice for the same pull request while
diff --git a/.github/workflows/rt-rpi-300.yml b/.github/workflows/rt-rpi-300.yml
index 7d43a9728..6075cebff 100644
--- a/.github/workflows/rt-rpi-300.yml
+++ b/.github/workflows/rt-rpi-300.yml
@@ -34,7 +34,7 @@ on:
 jobs:
   yocto:
     name: Yocto
-    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@v1.25.47
+    uses: balena-os/balena-yocto-scripts/.github/workflows/yocto-build-deploy.yml@9646cf9ad0f3c6ac4b2ce11e0ef21b8fa9276149 # v1.25.47
     # Prevent duplicate workflow executions for pull_request (PR) and pull_request_target (PRT) events.
     # Both PR and PRT will be triggered for the same pull request, whether it is internal or from a fork.
     # This condition will prevent the workflow from running twice for the same pull request while