diff --git a/.github/workflows/test-shellcheck.yml b/.github/workflows/test-shellcheck.yml
index 7187f93e2..fa2034b8b 100644
--- a/.github/workflows/test-shellcheck.yml
+++ b/.github/workflows/test-shellcheck.yml
@@ -31,7 +31,7 @@ jobs:
       - name: Install shellfmt
         shell: bash
         run: |
-          go install github.com/katexochen/sh/v3/cmd/shfmt@latest
+          go install github.com/katexochen/sh/v3/cmd/shfmt@faf7f58964998201d22efe41fef41ae4e1953f3b # v3.6.0
 
       - name: Run ShellCheck
         uses: ludeeus/action-shellcheck@6d3f514f44620b9d4488e380339edc0d9bbe2fba # master
diff --git a/.github/workflows/test-shellfmt.yml b/.github/workflows/test-shellfmt.yml
index 903a2ad3a..bee3bba36 100644
--- a/.github/workflows/test-shellfmt.yml
+++ b/.github/workflows/test-shellfmt.yml
@@ -31,7 +31,7 @@ jobs:
       - name: Install shellfmt
         shell: bash
         run: |
-          go install github.com/katexochen/sh/v3/cmd/shfmt@latest
+          go install github.com/katexochen/sh/v3/cmd/shfmt@faf7f58964998201d22efe41fef41ae4e1953f3b # v3.6.0
 
       - name: Run shellfmt
         shell: bash