diff --git a/.github/workflows/code-simplifier.lock.yml b/.github/workflows/code-simplifier.lock.yml
index 0881bb901..e1ad85846 100644
--- a/.github/workflows/code-simplifier.lock.yml
+++ b/.github/workflows/code-simplifier.lock.yml
@@ -56,7 +56,7 @@ jobs:
       secret_verification_result: ${{ steps.validate-secret.outputs.verification_result }}
     steps:
       - name: Setup Scripts
-        uses: github/gh-aw/actions/setup@89ae1c2ebfae7f8233fa4bd6a83b1121f65dc376 # v0.65.0
+        uses: github/gh-aw/actions/setup@17f01e1a5f75fa627fab7a800878bd14e29d8005 # v0.65.0
         with:
           destination: /opt/gh-aw/actions
       - name: Generate agentic run info
@@ -264,7 +264,7 @@ jobs:
       output_types: ${{ steps.collect_output.outputs.output_types }}
     steps:
       - name: Setup Scripts
-        uses: github/gh-aw/actions/setup@89ae1c2ebfae7f8233fa4bd6a83b1121f65dc376 # v0.65.0
+        uses: github/gh-aw/actions/setup@17f01e1a5f75fa627fab7a800878bd14e29d8005 # v0.65.0
         with:
           destination: /opt/gh-aw/actions
       - name: Checkout repository
@@ -986,7 +986,7 @@ jobs:
       total_count: ${{ steps.missing_tool.outputs.total_count }}
     steps:
       - name: Setup Scripts
-        uses: github/gh-aw/actions/setup@89ae1c2ebfae7f8233fa4bd6a83b1121f65dc376 # v0.65.0
+        uses: github/gh-aw/actions/setup@17f01e1a5f75fa627fab7a800878bd14e29d8005 # v0.65.0
         with:
           destination: /opt/gh-aw/actions
       - name: Download agent output artifact
@@ -1088,7 +1088,7 @@ jobs:
       matched_command: ''
     steps:
       - name: Setup Scripts
-        uses: github/gh-aw/actions/setup@89ae1c2ebfae7f8233fa4bd6a83b1121f65dc376 # v0.65.0
+        uses: github/gh-aw/actions/setup@17f01e1a5f75fa627fab7a800878bd14e29d8005 # v0.65.0
         with:
           destination: /opt/gh-aw/actions
       - name: Check team membership for workflow
@@ -1144,7 +1144,7 @@ jobs:
       process_safe_outputs_temporary_id_map: ${{ steps.process_safe_outputs.outputs.temporary_id_map }}
     steps:
       - name: Setup Scripts
-        uses: github/gh-aw/actions/setup@89ae1c2ebfae7f8233fa4bd6a83b1121f65dc376 # v0.65.0
+        uses: github/gh-aw/actions/setup@17f01e1a5f75fa627fab7a800878bd14e29d8005 # v0.65.0
         with:
           destination: /opt/gh-aw/actions
       - name: Download agent output artifact