diff --git a/.github/workflows/atlantis-apply-on-no-changes.yaml b/.github/workflows/atlantis-apply-on-no-changes.yaml
index 6834e98..725ad29 100644
--- a/.github/workflows/atlantis-apply-on-no-changes.yaml
+++ b/.github/workflows/atlantis-apply-on-no-changes.yaml
@@ -23,7 +23,7 @@ jobs:
     steps:
       # https://github.com/marketplace/actions/harden-runner
       - name: harden runner
-        uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
+        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
         with:
           egress-policy: audit
 
diff --git a/.github/workflows/changed-files.yaml b/.github/workflows/changed-files.yaml
index 0351ad9..bf8612e 100644
--- a/.github/workflows/changed-files.yaml
+++ b/.github/workflows/changed-files.yaml
@@ -46,7 +46,7 @@ jobs:
     steps:
       # https://github.com/marketplace/actions/harden-runner
       - name: harden runner
-        uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
+        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
         with:
           egress-policy: audit
 
diff --git a/.github/workflows/deploy-gh-pages.yaml b/.github/workflows/deploy-gh-pages.yaml
index 9d963fe..a063b18 100644
--- a/.github/workflows/deploy-gh-pages.yaml
+++ b/.github/workflows/deploy-gh-pages.yaml
@@ -33,7 +33,7 @@ jobs:
     steps:
       # https://github.com/marketplace/actions/harden-runner
       - name: harden runner
-        uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
+        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
         with:
           egress-policy: audit
 
diff --git a/.github/workflows/docker-build.yaml b/.github/workflows/docker-build.yaml
index 7b0952e..564a9bf 100644
--- a/.github/workflows/docker-build.yaml
+++ b/.github/workflows/docker-build.yaml
@@ -28,7 +28,7 @@ jobs:
     steps:
       # https://github.com/marketplace/actions/harden-runner
       - name: harden runner
-        uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
+        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
         with:
           egress-policy: audit
 
diff --git a/.github/workflows/docker-push.yaml b/.github/workflows/docker-push.yaml
index e1fa6c4..a59e2a5 100644
--- a/.github/workflows/docker-push.yaml
+++ b/.github/workflows/docker-push.yaml
@@ -46,7 +46,7 @@ jobs:
     steps:
       # https://github.com/marketplace/actions/harden-runner
       - name: harden runner
-        uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
+        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
         with:
           egress-policy: audit
 
diff --git a/.github/workflows/run-renovate.yaml b/.github/workflows/run-renovate.yaml
index 0c85316..ccd6c4c 100644
--- a/.github/workflows/run-renovate.yaml
+++ b/.github/workflows/run-renovate.yaml
@@ -45,7 +45,7 @@ jobs:
     steps:
       # https://github.com/marketplace/actions/harden-runner
       - name: harden runner
-        uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
+        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
         with:
           egress-policy: audit