diff --git a/.github/workflows/pr-v3.yml b/.github/workflows/pr-v3.yml
index a6893f732..7349008ad 100644
--- a/.github/workflows/pr-v3.yml
+++ b/.github/workflows/pr-v3.yml
@@ -17,7 +17,7 @@ jobs:
       - uses: actions/checkout@v3
 
       - name: Verify Changed files
-        uses: tj-actions/verify-changed-files@v17
+        uses: step-security/changed-files@3dbe17c78367e7d60f00d78ae6781a35be47b4a1 # v45.0.1
         id: verify-changed-files
         with:
           files: |
diff --git a/.github/workflows/publish-npm.yml b/.github/workflows/publish-npm.yml
index eb7275f30..88517c46c 100644
--- a/.github/workflows/publish-npm.yml
+++ b/.github/workflows/publish-npm.yml
@@ -23,7 +23,7 @@ jobs:
 
       - name: Detect committed package.json changes
         id: package-json-changes
-        uses: tj-actions/changed-files@v45
+        uses: step-security/changed-files@3dbe17c78367e7d60f00d78ae6781a35be47b4a1 # v45.0.1
         with:
           files: |
             v3/internal/runtime/desktop/@wailsio/runtime/package.json
@@ -32,7 +32,7 @@ jobs:
         if: >-
           steps.package-json-changes.outputs.any_modified != 'true'
         id: source-changes
-        uses: tj-actions/changed-files@v45
+        uses: step-security/changed-files@3dbe17c78367e7d60f00d78ae6781a35be47b4a1 # v45.0.1
         with:
           files: |
             v3/internal/runtime/Taskfile.yaml
diff --git a/.github/workflows/semgrep.yml b/.github/workflows/semgrep.yml
index 453e4cb85..7533a3a04 100644
--- a/.github/workflows/semgrep.yml
+++ b/.github/workflows/semgrep.yml
@@ -5,6 +5,7 @@ on:
     branches:
     - main
     - master
+    - v3-alpha
     paths:
     - .github/workflows/semgrep.yml
   schedule:
diff --git a/.github/workflows/upload-source-documents.yml b/.github/workflows/upload-source-documents.yml
index df15246fc..69d6c3e48 100644
--- a/.github/workflows/upload-source-documents.yml
+++ b/.github/workflows/upload-source-documents.yml
@@ -15,7 +15,7 @@ jobs:
 
       - name: Verify Changed files
         id: changed-files
-        uses: tj-actions/changed-files@v41
+        uses: step-security/changed-files@3dbe17c78367e7d60f00d78ae6781a35be47b4a1 # v45.0.1
         with:
           files: |
             website/**/*.mdx