diff --git a/.github/disabled-workflows/new-release-branch.yaml b/.github/disabled-workflows/new-release-branch.yaml
index 8aac9c8d0064a..58bd6310c1603 100644
--- a/.github/disabled-workflows/new-release-branch.yaml
+++ b/.github/disabled-workflows/new-release-branch.yaml
@@ -116,7 +116,7 @@ jobs:
           BRANCH_NAME: ${{ inputs.branch_name }}
         run: git push --set-upstream origin "$BRANCH_NAME"
 
-      - uses: microsoft/typescript-bot-test-triggerer/.github/actions/post-workflow-result@master
+      - uses: microsoft/typescript-bot-test-triggerer/.github/actions/post-workflow-result@08bcbbf253fd6bc533dd8b9ab47a58582be57fbe # master
         if: ${{ !cancelled() && inputs.distinct_id }}
         with:
           success_comment: "I've created ${{ inputs.branch_name }} with version ${{ inputs.package_version }} for you."
diff --git a/.github/disabled-workflows/set-version.yaml b/.github/disabled-workflows/set-version.yaml
index c1a328c60c2ee..dd58152a1dcb6 100644
--- a/.github/disabled-workflows/set-version.yaml
+++ b/.github/disabled-workflows/set-version.yaml
@@ -117,7 +117,7 @@ jobs:
           git config --local http.https://github.com/.extraheader "AUTHORIZATION: basic ${basic_auth}"
       - run: git push
 
-      - uses: microsoft/typescript-bot-test-triggerer/.github/actions/post-workflow-result@master
+      - uses: microsoft/typescript-bot-test-triggerer/.github/actions/post-workflow-result@08bcbbf253fd6bc533dd8b9ab47a58582be57fbe # master
         if: ${{ !cancelled() && inputs.distinct_id }}
         with:
           success_comment: "I've set the version of ${{ inputs.branch_name }} to ${{ inputs.package_version }} for you."
diff --git a/.github/disabled-workflows/sync-branch.yaml b/.github/disabled-workflows/sync-branch.yaml
index 9a104d555c8da..4c19e1e67d60a 100644
--- a/.github/disabled-workflows/sync-branch.yaml
+++ b/.github/disabled-workflows/sync-branch.yaml
@@ -91,7 +91,7 @@ jobs:
           git config --local http.https://github.com/.extraheader "AUTHORIZATION: basic ${basic_auth}"
       - run: git push
 
-      - uses: microsoft/typescript-bot-test-triggerer/.github/actions/post-workflow-result@master
+      - uses: microsoft/typescript-bot-test-triggerer/.github/actions/post-workflow-result@08bcbbf253fd6bc533dd8b9ab47a58582be57fbe # master
         if: ${{ !cancelled() && inputs.distinct_id }}
         with:
           success_comment: "I've pulled main into ${{ inputs.branch_name }} for you."
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index a7697847d16de..bacc35bff64f2 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -42,7 +42,6 @@ jobs:
       - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version: 'lts/*'
-      - uses: dtolnay/rust-toolchain@fcf085fcb4b4b8f63f96906cd713eb52181b5ea4 # stable
       - uses: ./.github/actions/setup-go
       - run: npm ci
       - run: npx hereby typescript:release --forRelease --setPrerelease dev.0.0
diff --git a/.github/workflows/create-cherry-pick-pr.yml b/.github/workflows/create-cherry-pick-pr.yml
index be2112ddca5ad..3313c7cb61ff9 100644
--- a/.github/workflows/create-cherry-pick-pr.yml
+++ b/.github/workflows/create-cherry-pick-pr.yml
@@ -205,7 +205,7 @@ jobs:
 
             return commentBody;
 
-      - uses: microsoft/typescript-bot-test-triggerer/.github/actions/post-workflow-result@master
+      - uses: microsoft/typescript-bot-test-triggerer/.github/actions/post-workflow-result@08bcbbf253fd6bc533dd8b9ab47a58582be57fbe # master
         if: ${{ !cancelled() && inputs.distinct_id }}
         with:
           success_comment: ${{ steps.open-pr.outputs.result }}