diff --git a/.github/workflows/acceptance-tests.yml b/.github/workflows/acceptance-tests.yml
index 877a9e6..a5055fc 100644
--- a/.github/workflows/acceptance-tests.yml
+++ b/.github/workflows/acceptance-tests.yml
@@ -56,7 +56,7 @@ jobs:
           - wp: '5.9'
             php: '7.4'
       fail-fast: false
-    uses: johnbillion/plugin-infrastructure/.github/workflows/reusable-acceptance-tests.yml@trunk
+    uses: johnbillion/plugin-infrastructure/.github/workflows/reusable-acceptance-tests.yml@2cf5ad2c24b6b6a277f494eada68693032485ca7
     with:
       node: false
       php: ${{ matrix.php }}
diff --git a/.github/workflows/coding-standards.yml b/.github/workflows/coding-standards.yml
index 8f4294e..fd0816e 100644
--- a/.github/workflows/coding-standards.yml
+++ b/.github/workflows/coding-standards.yml
@@ -32,7 +32,7 @@ jobs:
     name: ${{ matrix.label }}
     permissions:
       contents: read
-    uses: johnbillion/plugin-infrastructure/.github/workflows/reusable-coding-standards.yml@trunk
+    uses: johnbillion/plugin-infrastructure/.github/workflows/reusable-coding-standards.yml@2cf5ad2c24b6b6a277f494eada68693032485ca7
     strategy:
       matrix:
         label:
diff --git a/.github/workflows/lint-workflows.yml b/.github/workflows/lint-workflows.yml
index b1fcd1d..223b659 100644
--- a/.github/workflows/lint-workflows.yml
+++ b/.github/workflows/lint-workflows.yml
@@ -27,4 +27,4 @@ jobs:
       security-events: write
       actions: read
       contents: read
-    uses: johnbillion/plugin-infrastructure/.github/workflows/reusable-workflow-lint.yml@trunk
+    uses: johnbillion/plugin-infrastructure/.github/workflows/reusable-workflow-lint.yml@2cf5ad2c24b6b6a277f494eada68693032485ca7
diff --git a/.github/workflows/static-analysis.yml b/.github/workflows/static-analysis.yml
index 9fafd7d..902f2e8 100644
--- a/.github/workflows/static-analysis.yml
+++ b/.github/workflows/static-analysis.yml
@@ -28,7 +28,7 @@ jobs:
     name: ${{ matrix.label }}
     permissions:
       contents: read
-    uses: johnbillion/plugin-infrastructure/.github/workflows/reusable-static-analysis.yml@trunk
+    uses: johnbillion/plugin-infrastructure/.github/workflows/reusable-static-analysis.yml@2cf5ad2c24b6b6a277f494eada68693032485ca7
     strategy:
       matrix:
         label:
diff --git a/composer.json b/composer.json
index 9d937bd..6e3d187 100644
--- a/composer.json
+++ b/composer.json
@@ -31,7 +31,7 @@
 		"codeception/module-webdriver": "^1.0",
 		"codeception/util-universalframework": "^1.0",
 		"dealerdirect/phpcodesniffer-composer-installer": "^0.7.0",
-		"johnbillion/plugin-infrastructure": "dev-trunk",
+		"johnbillion/plugin-infrastructure": "dev-ossf-scorecard",
 		"johnbillion/wp-compat": "0.2.3",
 		"lucatume/wp-browser": "3.2.1",
 		"phpcompatibility/phpcompatibility-wp": "2.1.5",