diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index b4de1280cd..1b5c37705e 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -1866,7 +1866,7 @@ jobs:
       # This job already waits for the producer. Reuse its exact sealed bytes
       # instead of restoring Go modules or compiling again after cache eviction.
       - name: 📥 Restore KSail binary
-        uses: devantler-tech/ksail/.github/actions/restore-ksail-binary@ee5fe3922267eb83f074c2fcccdfdc5c8586d3c7
+        uses: devantler-tech/ksail/.github/actions/restore-ksail-binary@c9c5cb557c2e5945b2f83de1e52d452c1e1f5ab2
         with:
           artifact-id: ${{ needs.build-artifact.outputs.artifact-id }}
           binary-sha256: ${{ needs.build-artifact.outputs.binary-sha256 }}
@@ -2058,7 +2058,7 @@ jobs:
 
       - name: 📥 Restore KSail binary
         # Pin the identical published action until actionlint supports $/ references.
-        uses: devantler-tech/ksail/.github/actions/restore-ksail-binary@ee5fe3922267eb83f074c2fcccdfdc5c8586d3c7
+        uses: devantler-tech/ksail/.github/actions/restore-ksail-binary@c9c5cb557c2e5945b2f83de1e52d452c1e1f5ab2
         with:
           artifact-id: ${{ needs.build-artifact.outputs.artifact-id }}
           binary-sha256: ${{ needs.build-artifact.outputs.binary-sha256 }}
diff --git a/internal/ciharness/binary_artifact_test.go b/internal/ciharness/binary_artifact_test.go
index 3b133dfd03..a3885ba781 100644
--- a/internal/ciharness/binary_artifact_test.go
+++ b/internal/ciharness/binary_artifact_test.go
@@ -57,7 +57,7 @@ func TestKSailBinaryArtifactDockerConsumer(t *testing.T) {
 	restore := findHarnessStep(t, consumer.Steps, "📥 Restore KSail binary")
 	assert.Equal(t,
 		"devantler-tech/ksail/.github/actions/restore-ksail-binary@"+
-			"ee5fe3922267eb83f074c2fcccdfdc5c8586d3c7", restore.Uses)
+			"c9c5cb557c2e5945b2f83de1e52d452c1e1f5ab2", restore.Uses)
 	assert.Equal(
 		t,
 		"${{ needs.build-artifact.outputs.artifact-id }}",
@@ -95,7 +95,7 @@ func TestKSailBinaryArtifactMirrorWarmerConsumer(t *testing.T) {
 	restore := findHarnessStep(t, consumer.Steps, "📥 Restore KSail binary")
 	assert.Equal(t,
 		"devantler-tech/ksail/.github/actions/restore-ksail-binary@"+
-			"ee5fe3922267eb83f074c2fcccdfdc5c8586d3c7", restore.Uses)
+			"c9c5cb557c2e5945b2f83de1e52d452c1e1f5ab2", restore.Uses)
 	assert.Equal(
 		t,
 		"${{ needs.build-artifact.outputs.artifact-id }}",