diff --git a/.github/workflows/build-all.yml b/.github/workflows/build-all.yml
index 950c362..5414cec 100644
--- a/.github/workflows/build-all.yml
+++ b/.github/workflows/build-all.yml
@@ -44,7 +44,7 @@ jobs:
       attestations: write # needed for build provenance attestation
       packages: write # needed for pushing to ghcr.io
       artifact-metadata: write # needed for build provenance attestation
-    uses: bowtie-json-schema/bowtie/.github/workflows/harness-ci.yml@d0851da8a8082b366331b43634d4915435b69dab # main
+    uses: bowtie-json-schema/bowtie/.github/workflows/harness-ci.yml@1e1f241d37588de8f7d41d543563f4f7740c50c7 # main
     with:
       ref: ${{ matrix.revision }}
       publish: true
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index cf19396..a2c01ce 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -57,7 +57,7 @@ jobs:
       attestations: write # needed for build provenance attestation
       packages: write # needed for pushing to ghcr.io
       artifact-metadata: write # needed for build provenance attestation
-    uses: bowtie-json-schema/bowtie/.github/workflows/harness-ci.yml@d0851da8a8082b366331b43634d4915435b69dab # main
+    uses: bowtie-json-schema/bowtie/.github/workflows/harness-ci.yml@1e1f241d37588de8f7d41d543563f4f7740c50c7 # main
     with:
       # Only publish from pushes to the default branch; PRs build & smoke only.
       publish: ${{ github.event_name == 'push' && github.ref == 'refs/heads/main' }}
diff --git a/.github/workflows/dependabot-build.yml b/.github/workflows/dependabot-build.yml
index 1421a7a..b9c7c39 100644
--- a/.github/workflows/dependabot-build.yml
+++ b/.github/workflows/dependabot-build.yml
@@ -36,7 +36,7 @@ jobs:
       attestations: write # needed for build provenance attestation
       packages: write # needed for pushing to ghcr.io
       artifact-metadata: write # needed for build provenance attestation
-    uses: bowtie-json-schema/bowtie/.github/workflows/harness-ci.yml@d0851da8a8082b366331b43634d4915435b69dab # main
+    uses: bowtie-json-schema/bowtie/.github/workflows/harness-ci.yml@1e1f241d37588de8f7d41d543563f4f7740c50c7 # main
     with:
       ref: ${{ github.event.workflow_run.head_sha }}
       publish: true