diff --git a/.github/workflows/_test.yml b/.github/workflows/_test.yml
index 8055f1699..343922e42 100644
--- a/.github/workflows/_test.yml
+++ b/.github/workflows/_test.yml
@@ -20,7 +20,7 @@ jobs:
     steps:
       - name: 🛡️ Harden Runner
         if: github.repository_owner == 'eclipse-score'
-        uses: step-security/harden-runner@v2.21.0
+        uses: step-security/harden-runner@v2.21.1
         with:
           egress-policy: audit
 
diff --git a/.github/workflows/docs-publish.yml b/.github/workflows/docs-publish.yml
index 5c399126d..f74f0ffbc 100644
--- a/.github/workflows/docs-publish.yml
+++ b/.github/workflows/docs-publish.yml
@@ -21,7 +21,7 @@ on:
 jobs:
   docs-deploy:
     if: github.event.workflow_run.conclusion == 'success'
-    uses: eclipse-score/cicd-workflows/.github/workflows/docs-publish.yml@37eaadadfefc263d94a858d25665735659e916fa
+    uses: eclipse-score/cicd-workflows/.github/workflows/docs-publish.yml@9966c270e864dd47203a023225a2fc9422bac08f
     permissions:
       actions: read
       contents: write
diff --git a/.github/workflows/downstream_compatibility.yml b/.github/workflows/downstream_compatibility.yml
index 16d0c4f49..14443553c 100644
--- a/.github/workflows/downstream_compatibility.yml
+++ b/.github/workflows/downstream_compatibility.yml
@@ -47,7 +47,7 @@ jobs:
     steps:
       - name: 🛡️ Harden Runner
         if: github.repository_owner == 'eclipse-score'
-        uses: step-security/harden-runner@v2.21.0
+        uses: step-security/harden-runner@v2.21.1
         with:
           egress-policy: audit
 
diff --git a/.github/workflows/link_check.yml b/.github/workflows/link_check.yml
index 589e62fda..15c84f4cb 100644
--- a/.github/workflows/link_check.yml
+++ b/.github/workflows/link_check.yml
@@ -28,7 +28,7 @@ jobs:
     steps:
       - name: 🛡️ Harden Runner
         if: github.repository_owner == 'eclipse-score'
-        uses: step-security/harden-runner@v2.21.0
+        uses: step-security/harden-runner@v2.21.1
         with:
           egress-policy: audit
       - name: Checkout repo
diff --git a/.github/workflows/on-pr.yml b/.github/workflows/on-pr.yml
index 398d8ffe3..eef3acdec 100644
--- a/.github/workflows/on-pr.yml
+++ b/.github/workflows/on-pr.yml
@@ -35,7 +35,7 @@ jobs:
 
   docs-build:
     needs: [tests]
-    uses: eclipse-score/cicd-workflows/.github/workflows/docs.yml@37eaadadfefc263d94a858d25665735659e916fa
+    uses: eclipse-score/cicd-workflows/.github/workflows/docs.yml@9966c270e864dd47203a023225a2fc9422bac08f
     permissions:
       contents: read
     with:
diff --git a/.github/workflows/test_links.yml b/.github/workflows/test_links.yml
index e47c15fe8..c08a8c16c 100644
--- a/.github/workflows/test_links.yml
+++ b/.github/workflows/test_links.yml
@@ -23,7 +23,7 @@ jobs:
     steps:
       - name: 🛡️ Harden Runner
         if: github.repository_owner == 'eclipse-score'
-        uses: step-security/harden-runner@v2.21.0
+        uses: step-security/harden-runner@v2.21.1
         with:
           egress-policy: audit