diff --git a/.github/workflows/acceptance-tests.yml b/.github/workflows/acceptance-tests.yml
index 877a9e6..65ea49a 100644
--- a/.github/workflows/acceptance-tests.yml
+++ b/.github/workflows/acceptance-tests.yml
@@ -56,7 +56,7 @@ jobs:
           - wp: '5.9'
             php: '7.4'
       fail-fast: false
-    uses: johnbillion/plugin-infrastructure/.github/workflows/reusable-acceptance-tests.yml@trunk
+    uses: johnbillion/plugin-infrastructure/.github/workflows/reusable-acceptance-tests.yml@d59005efa284e4b17207054aa538f6dfba147bf3
     with:
       node: false
       php: ${{ matrix.php }}
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index a379fbf..2a7fdec 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -14,7 +14,7 @@ jobs:
     name: Build
     permissions:
       contents: write
-    uses: johnbillion/plugin-infrastructure/.github/workflows/reusable-build.yml@trunk
+    uses: johnbillion/plugin-infrastructure/.github/workflows/reusable-build.yml@d59005efa284e4b17207054aa538f6dfba147bf3
     with:
       node: false
       tag: ${{ github.event_name != 'workflow_dispatch' }}
diff --git a/.github/workflows/coding-standards.yml b/.github/workflows/coding-standards.yml
index 8f4294e..f5e9276 100644
--- a/.github/workflows/coding-standards.yml
+++ b/.github/workflows/coding-standards.yml
@@ -32,7 +32,7 @@ jobs:
     name: ${{ matrix.label }}
     permissions:
       contents: read
-    uses: johnbillion/plugin-infrastructure/.github/workflows/reusable-coding-standards.yml@trunk
+    uses: johnbillion/plugin-infrastructure/.github/workflows/reusable-coding-standards.yml@d59005efa284e4b17207054aa538f6dfba147bf3
     strategy:
       matrix:
         label:
diff --git a/.github/workflows/deploy-assets.yml b/.github/workflows/deploy-assets.yml
index 13f39ef..b05f664 100644
--- a/.github/workflows/deploy-assets.yml
+++ b/.github/workflows/deploy-assets.yml
@@ -13,7 +13,7 @@ jobs:
     name: WordPress.org
     permissions:
       contents: read
-    uses: johnbillion/plugin-infrastructure/.github/workflows/reusable-deploy-assets.yml@trunk
+    uses: johnbillion/plugin-infrastructure/.github/workflows/reusable-deploy-assets.yml@d59005efa284e4b17207054aa538f6dfba147bf3
     with:
       plugin: wp-crontrol
       readme: readme.txt
diff --git a/.github/workflows/deploy-tag.yml b/.github/workflows/deploy-tag.yml
index 7b07b44..f6fa581 100644
--- a/.github/workflows/deploy-tag.yml
+++ b/.github/workflows/deploy-tag.yml
@@ -18,7 +18,7 @@ permissions: {}
 jobs:
   deploy:
     name: Deploy Tag
-    uses: johnbillion/plugin-infrastructure/.github/workflows/reusable-deploy-tag.yml@trunk
+    uses: johnbillion/plugin-infrastructure/.github/workflows/reusable-deploy-tag.yml@d59005efa284e4b17207054aa538f6dfba147bf3
     permissions:
       contents: read
       issues: write
diff --git a/.github/workflows/lint-workflows.yml b/.github/workflows/lint-workflows.yml
index b1fcd1d..1f12306 100644
--- a/.github/workflows/lint-workflows.yml
+++ b/.github/workflows/lint-workflows.yml
@@ -27,4 +27,4 @@ jobs:
       security-events: write
       actions: read
       contents: read
-    uses: johnbillion/plugin-infrastructure/.github/workflows/reusable-workflow-lint.yml@trunk
+    uses: johnbillion/plugin-infrastructure/.github/workflows/reusable-workflow-lint.yml@d59005efa284e4b17207054aa538f6dfba147bf3
diff --git a/.github/workflows/static-analysis.yml b/.github/workflows/static-analysis.yml
index 9fafd7d..fecca8d 100644
--- a/.github/workflows/static-analysis.yml
+++ b/.github/workflows/static-analysis.yml
@@ -28,7 +28,7 @@ jobs:
     name: ${{ matrix.label }}
     permissions:
       contents: read
-    uses: johnbillion/plugin-infrastructure/.github/workflows/reusable-static-analysis.yml@trunk
+    uses: johnbillion/plugin-infrastructure/.github/workflows/reusable-static-analysis.yml@d59005efa284e4b17207054aa538f6dfba147bf3
     strategy:
       matrix:
         label:
diff --git a/composer.json b/composer.json
index 5bada14..aebc043 100644
--- a/composer.json
+++ b/composer.json
@@ -31,7 +31,7 @@
 		"codeception/module-webdriver": "^1.0",
 		"codeception/util-universalframework": "^1.0",
 		"dealerdirect/phpcodesniffer-composer-installer": "^0.7.0",
-		"johnbillion/plugin-infrastructure": "dev-trunk",
+		"johnbillion/plugin-infrastructure": "dev-semgrep",
 		"johnbillion/wp-compat": "0.2.3",
 		"lucatume/wp-browser": "3.2.1",
 		"phpcompatibility/phpcompatibility-wp": "2.1.5",