diff --git a/.github/workflows/make_release.yml b/.github/workflows/make_release.yml
index 639947e94..43e987fcd 100644
--- a/.github/workflows/make_release.yml
+++ b/.github/workflows/make_release.yml
@@ -18,7 +18,7 @@ jobs:
       - uses: actions/checkout@v6.0.2
         with:
           fetch-depth: 0
-      - uses: hynek/build-and-inspect-python-package@v2
+      - uses: hynek/build-and-inspect-python-package@v2.18.0
         with:
           attest-build-provenance-github: 'true'
 
diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index 04fc63db4..3a1d0f223 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -248,4 +248,4 @@ jobs:
       - uses: actions/checkout@v6.0.2
         with:
           fetch-depth: 0
-      - uses: hynek/build-and-inspect-python-package@v2
+      - uses: hynek/build-and-inspect-python-package@v2.18.0