diff --git a/.github/workflows/automation-labeler.yml b/.github/workflows/automation-labeler.yml
index 0673b80..a2bf7c1 100644
--- a/.github/workflows/automation-labeler.yml
+++ b/.github/workflows/automation-labeler.yml
@@ -32,7 +32,7 @@ jobs:
 
     steps:
     - name: Harden the runner
-      uses: step-security/harden-runner@17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6 # v2.8.1
+      uses: step-security/harden-runner@0d381219ddf674d61a7572ddd19d7941e271515c # v2.9.0
       if: ${{ inputs.harden_runner != false }}
       with:
         disable-sudo: true
diff --git a/.github/workflows/deployment-python-pypi.yml b/.github/workflows/deployment-python-pypi.yml
index 911765a..71bf1cd 100644
--- a/.github/workflows/deployment-python-pypi.yml
+++ b/.github/workflows/deployment-python-pypi.yml
@@ -47,7 +47,7 @@ jobs:
       url: ${{ inputs.environment_url }}
     steps:
       - name: Harden the runner
-        uses: step-security/harden-runner@17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6 # v2.8.1
+        uses: step-security/harden-runner@0d381219ddf674d61a7572ddd19d7941e271515c # v2.9.0
         if: ${{ inputs.harden_runner == true }}
         with:
           egress-policy: audit
diff --git a/.github/workflows/deployment-s3.yml b/.github/workflows/deployment-s3.yml
index d721a8a..e17bac2 100644
--- a/.github/workflows/deployment-s3.yml
+++ b/.github/workflows/deployment-s3.yml
@@ -41,7 +41,7 @@ jobs:
       contents: read
     steps:
     - name: Harden the runner
-      uses: step-security/harden-runner@17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6 # v2.8.1
+      uses: step-security/harden-runner@0d381219ddf674d61a7572ddd19d7941e271515c # v2.9.0
       if: ${{ inputs.harden_runner != false }}
       with:
         egress-policy: audit
diff --git a/.github/workflows/integration-commit-validator.yml b/.github/workflows/integration-commit-validator.yml
index e4a3125..45ae0a4 100644
--- a/.github/workflows/integration-commit-validator.yml
+++ b/.github/workflows/integration-commit-validator.yml
@@ -51,7 +51,7 @@ jobs:
       regex: ${{ steps.set_regex.outputs.regex }}
     steps:
     - name: Harden the runner
-      uses: step-security/harden-runner@17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6 # v2.8.1
+      uses: step-security/harden-runner@0d381219ddf674d61a7572ddd19d7941e271515c # v2.9.0
       if: ${{ inputs.harden_runner != false }}
       with:
         disable-sudo: true
@@ -100,7 +100,7 @@ jobs:
       contents: read
     needs: setup
     steps:
-    - uses: step-security/harden-runner@17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6 # v2.8.1
+    - uses: step-security/harden-runner@0d381219ddf674d61a7572ddd19d7941e271515c # v2.9.0
       if: ${{ inputs.harden_runner != false }}
       with:
         disable-sudo: true
diff --git a/.github/workflows/integration-linter-pre-commit.yml b/.github/workflows/integration-linter-pre-commit.yml
index ef9f094..846410f 100644
--- a/.github/workflows/integration-linter-pre-commit.yml
+++ b/.github/workflows/integration-linter-pre-commit.yml
@@ -34,7 +34,7 @@ jobs:
       contents: read
     steps:
     - name: Harden the runner
-      uses: step-security/harden-runner@17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6 # v2.8.1
+      uses: step-security/harden-runner@0d381219ddf674d61a7572ddd19d7941e271515c # v2.9.0
       if: ${{ inputs.harden_runner != false }}
       with:
         egress-policy: audit
diff --git a/.github/workflows/integration-modification-script.yml b/.github/workflows/integration-modification-script.yml
index 6070aa8..0031382 100644
--- a/.github/workflows/integration-modification-script.yml
+++ b/.github/workflows/integration-modification-script.yml
@@ -51,7 +51,7 @@ jobs:
       BRANCH: ${{ inputs.ref || github.head_ref }}
     steps:
     - name: Harden the runner
-      uses: step-security/harden-runner@17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6 # v2.8.1
+      uses: step-security/harden-runner@0d381219ddf674d61a7572ddd19d7941e271515c # v2.9.0
       if: ${{ inputs.harden_runner != false }}
       with:
         disable-sudo: true
diff --git a/.github/workflows/integration-python.yml b/.github/workflows/integration-python.yml
index fea62e2..8631f5a 100644
--- a/.github/workflows/integration-python.yml
+++ b/.github/workflows/integration-python.yml
@@ -68,7 +68,7 @@ jobs:
       matrix:
         python-version: ${{ fromJSON(needs.setup.outputs.python-versions) }}
     steps:
-      - uses: step-security/harden-runner@17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6 # v2.8.1
+      - uses: step-security/harden-runner@0d381219ddf674d61a7572ddd19d7941e271515c # v2.9.0
         if: ${{ inputs.harden_runner == true }}
         with:
           egress-policy: audit
@@ -101,7 +101,7 @@ jobs:
         python-version: ${{ fromJSON(needs.setup.outputs.python-versions) }}
     steps:
       - name: Harden the runner
-        uses: step-security/harden-runner@17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6 # v2.8.1
+        uses: step-security/harden-runner@0d381219ddf674d61a7572ddd19d7941e271515c # v2.9.0
         if: ${{ inputs.harden_runner == true }}
         with:
           egress-policy: audit
diff --git a/.github/workflows/security-codacy.yml b/.github/workflows/security-codacy.yml
index f67c740..c2fc84d 100644
--- a/.github/workflows/security-codacy.yml
+++ b/.github/workflows/security-codacy.yml
@@ -30,7 +30,7 @@ jobs:
 
     steps:
     - name: Harden the runner
-      uses: step-security/harden-runner@17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6 # v2.8.1
+      uses: step-security/harden-runner@0d381219ddf674d61a7572ddd19d7941e271515c # v2.9.0
       if: ${{ inputs.harden_runner != false }}
       with:
         egress-policy: audit
diff --git a/.github/workflows/security-codeql.yml b/.github/workflows/security-codeql.yml
index 4d90d5d..3b90ec3 100644
--- a/.github/workflows/security-codeql.yml
+++ b/.github/workflows/security-codeql.yml
@@ -40,7 +40,7 @@ jobs:
 
     steps:
     - name: Harden the runner
-      uses: step-security/harden-runner@17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6 # v2.8.1
+      uses: step-security/harden-runner@0d381219ddf674d61a7572ddd19d7941e271515c # v2.9.0
       if: ${{ inputs.harden_runner != false }}
       with:
         egress-policy: audit
diff --git a/.github/workflows/security-dependencies.yml b/.github/workflows/security-dependencies.yml
index 9f1f09a..e28102d 100644
--- a/.github/workflows/security-dependencies.yml
+++ b/.github/workflows/security-dependencies.yml
@@ -38,7 +38,7 @@ jobs:
 
     steps:
     - name: Harden the runner
-      uses: step-security/harden-runner@17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6 # v2.8.1
+      uses: step-security/harden-runner@0d381219ddf674d61a7572ddd19d7941e271515c # v2.9.0
       if: ${{ inputs.harden_runner != false }}
       with:
         disable-sudo: true
diff --git a/.github/workflows/security-ossf-scorecard.yml b/.github/workflows/security-ossf-scorecard.yml
index 9906a65..1579028 100644
--- a/.github/workflows/security-ossf-scorecard.yml
+++ b/.github/workflows/security-ossf-scorecard.yml
@@ -41,7 +41,7 @@ jobs:
 
     steps:
       - name: Harden the runner
-        uses: step-security/harden-runner@17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6 # v2.8.1
+        uses: step-security/harden-runner@0d381219ddf674d61a7572ddd19d7941e271515c # v2.9.0
         if: ${{ inputs.harden_runner != false }}
         with:
           disable-sudo: true