diff --git a/.github/workflows/000-user-release.yaml b/.github/workflows/000-user-release.yaml
index 18b0dd4d..7a8cde27 100644
--- a/.github/workflows/000-user-release.yaml
+++ b/.github/workflows/000-user-release.yaml
@@ -56,7 +56,7 @@ jobs:
       tag: ${{ steps.prepare.outputs.tag }}
     steps:
       - name: Harden the runner (Audit all outbound calls)
-        uses: step-security/harden-runner@5ef0c079ce82195b2a36a210272d6b661572d83e # v2.14.2
+        uses: step-security/harden-runner@b09bb98e06d4d774595224525879c09bc6e98c40 # v2.20.1
         with:
           egress-policy: audit
 
@@ -165,7 +165,7 @@ jobs:
     if: needs.prepare-release.outputs.hasPublishWork == 'true'
     steps:
       - name: Harden the runner (Audit all outbound calls)
-        uses: step-security/harden-runner@5ef0c079ce82195b2a36a210272d6b661572d83e # v2.14.2
+        uses: step-security/harden-runner@b09bb98e06d4d774595224525879c09bc6e98c40 # v2.20.1
         with:
           egress-policy: audit
 
@@ -204,7 +204,7 @@ jobs:
       matrix: ${{ fromJson(needs.prepare-release.outputs.publishMatrix) }}
     steps:
       - name: Harden the runner (Audit all outbound calls)
-        uses: step-security/harden-runner@5ef0c079ce82195b2a36a210272d6b661572d83e # v2.14.2
+        uses: step-security/harden-runner@b09bb98e06d4d774595224525879c09bc6e98c40 # v2.20.1
         with:
           egress-policy: audit
 
@@ -255,7 +255,7 @@ jobs:
       && inputs.dry-run-enabled != true
     steps:
       - name: Harden the runner (Audit all outbound calls)
-        uses: step-security/harden-runner@5ef0c079ce82195b2a36a210272d6b661572d83e # v2.14.2
+        uses: step-security/harden-runner@b09bb98e06d4d774595224525879c09bc6e98c40 # v2.20.1
         with:
           egress-policy: audit
 
@@ -298,7 +298,7 @@ jobs:
       matrix: ${{ fromJson(needs.prepare-release.outputs.publishMatrix) }}
     steps:
       - name: Harden the runner (Audit all outbound calls)
-        uses: step-security/harden-runner@5ef0c079ce82195b2a36a210272d6b661572d83e # v2.14.2
+        uses: step-security/harden-runner@b09bb98e06d4d774595224525879c09bc6e98c40 # v2.20.1
         with:
           egress-policy: audit
 
diff --git a/.github/workflows/800-call-run-e2e-tests.yaml b/.github/workflows/800-call-run-e2e-tests.yaml
index 6108cacd..2b229192 100644
--- a/.github/workflows/800-call-run-e2e-tests.yaml
+++ b/.github/workflows/800-call-run-e2e-tests.yaml
@@ -26,7 +26,7 @@ jobs:
       E2E_LLM_PROVIDER: ${{ vars.E2E_LLM_PROVIDER }}
     steps:
       - name: Harden the runner (Audit all outbound calls)
-        uses: step-security/harden-runner@5ef0c079ce82195b2a36a210272d6b661572d83e # v2.14.2
+        uses: step-security/harden-runner@b09bb98e06d4d774595224525879c09bc6e98c40 # v2.20.1
         with:
           egress-policy: audit
 
diff --git a/.github/workflows/800-call-run-integration-tests.yaml b/.github/workflows/800-call-run-integration-tests.yaml
index b41973b8..9d46cd9a 100644
--- a/.github/workflows/800-call-run-integration-tests.yaml
+++ b/.github/workflows/800-call-run-integration-tests.yaml
@@ -26,7 +26,7 @@ jobs:
       E2E_LLM_PROVIDER: ${{ vars.E2E_LLM_PROVIDER }}
     steps:
       - name: Harden the runner (Audit all outbound calls)
-        uses: step-security/harden-runner@5ef0c079ce82195b2a36a210272d6b661572d83e # v2.14.2
+        uses: step-security/harden-runner@b09bb98e06d4d774595224525879c09bc6e98c40 # v2.20.1
         with:
           egress-policy: audit
 
diff --git a/.github/workflows/800-call-run-unit-tests.yaml b/.github/workflows/800-call-run-unit-tests.yaml
index 3dda0866..87e1f31a 100644
--- a/.github/workflows/800-call-run-unit-tests.yaml
+++ b/.github/workflows/800-call-run-unit-tests.yaml
@@ -17,7 +17,7 @@ jobs:
     runs-on: hedera-agent-linux-medium
     steps:
       - name: Harden the runner (Audit all outbound calls)
-        uses: step-security/harden-runner@5ef0c079ce82195b2a36a210272d6b661572d83e # v2.14.2
+        uses: step-security/harden-runner@b09bb98e06d4d774595224525879c09bc6e98c40 # v2.20.1
         with:
           egress-policy: audit
 
diff --git a/.github/workflows/flow-pull-request-formatting.yaml b/.github/workflows/flow-pull-request-formatting.yaml
index e4d4e37f..e3fb1f34 100644
--- a/.github/workflows/flow-pull-request-formatting.yaml
+++ b/.github/workflows/flow-pull-request-formatting.yaml
@@ -31,7 +31,7 @@ jobs:
     runs-on: hedera-agent-linux-medium
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@5ef0c079ce82195b2a36a210272d6b661572d83e # v2.14.2
+        uses: step-security/harden-runner@b09bb98e06d4d774595224525879c09bc6e98c40 # v2.20.1
         with:
           egress-policy: audit
 
@@ -45,7 +45,7 @@ jobs:
     runs-on: hedera-agent-linux-medium
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@5ef0c079ce82195b2a36a210272d6b661572d83e # v2.14.2
+        uses: step-security/harden-runner@b09bb98e06d4d774595224525879c09bc6e98c40 # v2.20.1
         with:
           egress-policy: audit