diff --git a/.github/actions/build-push-image-with-apko/action.yml b/.github/actions/build-push-image-with-apko/action.yml
index 98ecb0b4bc..367c68e303 100644
--- a/.github/actions/build-push-image-with-apko/action.yml
+++ b/.github/actions/build-push-image-with-apko/action.yml
@@ -40,7 +40,7 @@ runs:
           echo "image-exists=false" >> "$GITHUB_OUTPUT"
         fi
 
-    - uses: chainguard-images/actions/apko-publish@main
+    - uses: cbodonnell/cgr-actions/apko-publish@afcbc86480e2804ef1e2f47d1c913e9c8e33dbb8
       if: ${{ inputs.overwrite == 'true' || steps.check-image-exists.outputs.image-exists == 'false' }}
       with:
         config: ${{ inputs.apko-config }}
diff --git a/.github/actions/build-push-kotsadm-image/action.yml b/.github/actions/build-push-kotsadm-image/action.yml
index bec83c14dc..4d8a4a335f 100644
--- a/.github/actions/build-push-kotsadm-image/action.yml
+++ b/.github/actions/build-push-kotsadm-image/action.yml
@@ -70,7 +70,7 @@ runs:
         sign-with-temporary-key: true
         cache-dir: ${{ steps.cache-dir.outputs.cache_dir }}
 
-    - uses: chainguard-images/actions/apko-publish@main
+    - uses: cbodonnell/cgr-actions/apko-publish@afcbc86480e2804ef1e2f47d1c913e9c8e33dbb8
       with:
         config: deploy/apko.yaml
         archs: x86_64
diff --git a/.github/actions/build-push-kotsadm-migrations-image/action.yml b/.github/actions/build-push-kotsadm-migrations-image/action.yml
index 858ac584db..bde33322ff 100644
--- a/.github/actions/build-push-kotsadm-migrations-image/action.yml
+++ b/.github/actions/build-push-kotsadm-migrations-image/action.yml
@@ -52,7 +52,7 @@ runs:
         sign-with-temporary-key: true
         cache-dir: ${{ steps.cache-dir.outputs.cache_dir }}
 
-    - uses: chainguard-images/actions/apko-publish@main
+    - uses: cbodonnell/cgr-actions/apko-publish@afcbc86480e2804ef1e2f47d1c913e9c8e33dbb8
       with:
         config: migrations/deploy/apko.yaml
         archs: x86_64
diff --git a/.github/actions/build-push-kurl-proxy-image/action.yml b/.github/actions/build-push-kurl-proxy-image/action.yml
index abc258e893..d7ad104e2a 100644
--- a/.github/actions/build-push-kurl-proxy-image/action.yml
+++ b/.github/actions/build-push-kurl-proxy-image/action.yml
@@ -40,7 +40,7 @@ runs:
         sign-with-temporary-key: true
         cache-dir: ${{ steps.cache-dir.outputs.cache_dir }}
 
-    - uses: chainguard-images/actions/apko-publish@main
+    - uses: cbodonnell/cgr-actions/apko-publish@afcbc86480e2804ef1e2f47d1c913e9c8e33dbb8
       with:
         config: kurl_proxy/deploy/apko.yaml
         archs: x86_64