diff --git a/.github/workflows/acceptance-tests.yml b/.github/workflows/acceptance-tests.yml
index bf2c8cd..08fa5d5 100644
--- a/.github/workflows/acceptance-tests.yml
+++ b/.github/workflows/acceptance-tests.yml
@@ -55,7 +55,7 @@ jobs:
           - wp: '5.9'
             php: '7.4'
       fail-fast: false
-    uses: johnbillion/plugin-infrastructure/.github/workflows/reusable-acceptance-tests.yml@trunk
+    uses: johnbillion/plugin-infrastructure/.github/workflows/reusable-acceptance-tests.yml@2cf5ad2c24b6b6a277f494eada68693032485ca7
     with:
       wp: ${{ matrix.wp }}
       php: ${{ matrix.php }}
diff --git a/.github/workflows/coding-standards.yml b/.github/workflows/coding-standards.yml
index 8d652c3..1825c2c 100644
--- a/.github/workflows/coding-standards.yml
+++ b/.github/workflows/coding-standards.yml
@@ -32,7 +32,7 @@ jobs:
     name: ${{ matrix.label }}
     permissions:
       contents: read
-    uses: johnbillion/plugin-infrastructure/.github/workflows/reusable-coding-standards.yml@trunk
+    uses: johnbillion/plugin-infrastructure/.github/workflows/reusable-coding-standards.yml@2cf5ad2c24b6b6a277f494eada68693032485ca7
     strategy:
       matrix:
         label:
diff --git a/.github/workflows/integration-tests.yml b/.github/workflows/integration-tests.yml
index 714be03..5cd4eaa 100644
--- a/.github/workflows/integration-tests.yml
+++ b/.github/workflows/integration-tests.yml
@@ -34,7 +34,7 @@ jobs:
     name: WP ${{ matrix.wp }}
     permissions:
       contents: read
-    uses: johnbillion/plugin-infrastructure/.github/workflows/reusable-integration-tests.yml@trunk
+    uses: johnbillion/plugin-infrastructure/.github/workflows/reusable-integration-tests.yml@2cf5ad2c24b6b6a277f494eada68693032485ca7
     strategy:
       # See the following for PHP compatibility of WordPress versions:
       # https://make.wordpress.org/core/handbook/references/php-compatibility-and-wordpress-versions/
diff --git a/.github/workflows/lint-workflows.yml b/.github/workflows/lint-workflows.yml
index b1fcd1d..223b659 100644
--- a/.github/workflows/lint-workflows.yml
+++ b/.github/workflows/lint-workflows.yml
@@ -27,4 +27,4 @@ jobs:
       security-events: write
       actions: read
       contents: read
-    uses: johnbillion/plugin-infrastructure/.github/workflows/reusable-workflow-lint.yml@trunk
+    uses: johnbillion/plugin-infrastructure/.github/workflows/reusable-workflow-lint.yml@2cf5ad2c24b6b6a277f494eada68693032485ca7
diff --git a/.github/workflows/static-analysis.yml b/.github/workflows/static-analysis.yml
index 7ca9bb9..59a8cdd 100644
--- a/.github/workflows/static-analysis.yml
+++ b/.github/workflows/static-analysis.yml
@@ -28,7 +28,7 @@ jobs:
     name: ${{ matrix.label }}
     permissions:
       contents: read
-    uses: johnbillion/plugin-infrastructure/.github/workflows/reusable-static-analysis.yml@trunk
+    uses: johnbillion/plugin-infrastructure/.github/workflows/reusable-static-analysis.yml@2cf5ad2c24b6b6a277f494eada68693032485ca7
     strategy:
       matrix:
         label:
diff --git a/composer.json b/composer.json
index 0382f9e..777f7dd 100644
--- a/composer.json
+++ b/composer.json
@@ -31,7 +31,7 @@
 		"codeception/module-db": "^1.0",
 		"codeception/module-webdriver": "^1.0",
 		"codeception/util-universalframework": "^1.0",
-		"johnbillion/plugin-infrastructure": "dev-trunk",
+		"johnbillion/plugin-infrastructure": "dev-ossf-scorecard",
 		"johnbillion/wp-compat": "0.3.0",
 		"lucatume/wp-browser": "3.2.3",
 		"phpcompatibility/phpcompatibility-wp": "2.1.5",