diff --git a/.github/workflows/app.yaml b/.github/workflows/app.yaml
index 4fc52855e..85e5ab1d6 100644
--- a/.github/workflows/app.yaml
+++ b/.github/workflows/app.yaml
@@ -116,7 +116,7 @@ jobs:
       - name: Checkout
         uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
       - name: "Authenticate to Google Cloud"
-        uses: "google-github-actions/auth@55bd3a7c6e2ae7cf1877fd1ccb9d54c0503c457c" # ratchet:google-github-actions/auth@v2
+        uses: "google-github-actions/auth@71fee32a0bb7e97b4d33d548e7d957010649d8fa" # v2
         with:
           credentials_json: "${{ secrets.GOOGLE_APPLICATION_CREDENTIALS_DATA }}"
       - name: Deploy to Cloud Run
diff --git a/.github/workflows/colab.yml b/.github/workflows/colab.yml
index 0ca1a6e41..cbec2d292 100644
--- a/.github/workflows/colab.yml
+++ b/.github/workflows/colab.yml
@@ -72,7 +72,7 @@ jobs:
           conda list
           CONDA_SOLVER=libmamba CONDA_VERBOSITY=1 CONDA_OVERRIDE_CUDA="12.2" constructor conda/colab/ --output-dir=constructorscript/
       - name: "Authenticate to Google Cloud"
-        uses: "google-github-actions/auth@55bd3a7c6e2ae7cf1877fd1ccb9d54c0503c457c" # ratchet:google-github-actions/auth@v2
+        uses: "google-github-actions/auth@71fee32a0bb7e97b4d33d548e7d957010649d8fa" # v2
         with:
           credentials_json: "${{ secrets.GOOGLE_APPLICATION_CREDENTIALS_DATA }}"
       - name: "Upload environment to GCS"