diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 44e1175..c60a173 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -1,5 +1,4 @@
 name: CI
-
 on:
   pull_request:
     branches: [main]
@@ -20,7 +19,7 @@ permissions:
 jobs:
   dotnet:
     name: .NET Build & Test
-    uses: Sea-Haven-Industries/.github/.github/workflows/ci-dotnet.yaml@786dcfe8d95af8e640a76b09f30d2c0e86792157 # main
+    uses: Sea-Haven-Industries/.github/.github/workflows/ci-dotnet.yaml@0170a57c0d99b542cfafd1f3e1d369c32643f486 # v1.0.2
     with:
       working-directory: api
       solution: ProposalSystem.sln
@@ -30,7 +29,7 @@ jobs:
     # Phase 5: full frontend pipeline — format:check, build (tsc -b included),
     # vitest, Playwright chromium smoke. Replaces the old typecheck-only job
     # plus the standalone Web Tests job. No lint script yet (run-lint: false).
-    uses: Sea-Haven-Industries/.github/.github/workflows/ci-typescript-frontend.yaml@786dcfe8d95af8e640a76b09f30d2c0e86792157 # main
+    uses: Sea-Haven-Industries/.github/.github/workflows/ci-typescript-frontend.yaml@0170a57c0d99b542cfafd1f3e1d369c32643f486 # v1.0.2
     with:
       working-directory: web
       cache-dependency-path: web/package-lock.json
@@ -40,7 +39,7 @@ jobs:
 
   python:
     name: Python Lint
-    uses: Sea-Haven-Industries/.github/.github/workflows/ci-python-sam.yaml@786dcfe8d95af8e640a76b09f30d2c0e86792157 # main
+    uses: Sea-Haven-Industries/.github/.github/workflows/ci-python-sam.yaml@0170a57c0d99b542cfafd1f3e1d369c32643f486 # v1.0.2
     with:
       source-dirs: "lambdas/"
       run-sam-validate: false
@@ -68,7 +67,7 @@ jobs:
 
   mobile:
     name: Mobile Typecheck
-    uses: Sea-Haven-Industries/.github/.github/workflows/ci-typescript-cdk.yaml@786dcfe8d95af8e640a76b09f30d2c0e86792157 # main
+    uses: Sea-Haven-Industries/.github/.github/workflows/ci-typescript-cdk.yaml@0170a57c0d99b542cfafd1f3e1d369c32643f486 # v1.0.2
     with:
       working-directory: mobile
       cache-dependency-path: mobile/package-lock.json
@@ -78,7 +77,7 @@ jobs:
 
   infra:
     name: CDK Synth
-    uses: Sea-Haven-Industries/.github/.github/workflows/ci-typescript-cdk.yaml@786dcfe8d95af8e640a76b09f30d2c0e86792157 # main
+    uses: Sea-Haven-Industries/.github/.github/workflows/ci-typescript-cdk.yaml@0170a57c0d99b542cfafd1f3e1d369c32643f486 # v1.0.2
     with:
       working-directory: infra
       cache-dependency-path: infra/package-lock.json
diff --git a/.github/workflows/deploy-mobile.yaml b/.github/workflows/deploy-mobile.yaml
index 639eaf8..806906d 100644
--- a/.github/workflows/deploy-mobile.yaml
+++ b/.github/workflows/deploy-mobile.yaml
@@ -15,7 +15,7 @@ permissions:
 jobs:
   deploy-ios:
     name: Build & Upload to TestFlight
-    uses: Sea-Haven-Industries/.github/.github/workflows/cd-mobile-ios.yaml@786dcfe8d95af8e640a76b09f30d2c0e86792157 # main
+    uses: Sea-Haven-Industries/.github/.github/workflows/cd-mobile-ios.yaml@0170a57c0d99b542cfafd1f3e1d369c32643f486 # v1.0.2
     with:
       working-directory: mobile
       cache-dependency-path: mobile/package-lock.json
diff --git a/.github/workflows/deploy.yaml b/.github/workflows/deploy.yaml
index 062cced..041ba5f 100644
--- a/.github/workflows/deploy.yaml
+++ b/.github/workflows/deploy.yaml
@@ -15,7 +15,7 @@ permissions:
 jobs:
   deploy:
     name: Deploy to AWS
-    uses: Sea-Haven-Industries/.github/.github/workflows/cd-cdk.yaml@786dcfe8d95af8e640a76b09f30d2c0e86792157 # main
+    uses: Sea-Haven-Industries/.github/.github/workflows/cd-cdk.yaml@0170a57c0d99b542cfafd1f3e1d369c32643f486 # v1.0.2
     with:
       cdk-dir: infra
       dotnet-version: "8.0.x"
diff --git a/.github/workflows/labeler.yml b/.github/workflows/labeler.yml
index ea6df63..daa7bf9 100644
--- a/.github/workflows/labeler.yml
+++ b/.github/workflows/labeler.yml
@@ -2,10 +2,12 @@ name: Labeler
 on:
   pull_request:
     branches: [main]
+
 permissions:
   contents: read
   pull-requests: write
   issues: write
+
 jobs:
   label:
-    uses: Sea-Haven-Industries/.github/.github/workflows/callable-labeler.yaml@786dcfe8d95af8e640a76b09f30d2c0e86792157 # main
+    uses: Sea-Haven-Industries/.github/.github/workflows/callable-labeler.yaml@0170a57c0d99b542cfafd1f3e1d369c32643f486 # v1.0.2