diff --git a/.gitea/workflows/tf-apply.yml b/.gitea/workflows/tf-apply.yml
index 5ffa870..2b42f9b 100644
--- a/.gitea/workflows/tf-apply.yml
+++ b/.gitea/workflows/tf-apply.yml
@@ -20,7 +20,7 @@ jobs:
 
     steps:
       - name: Blackbox decrypt
-        uses: .gitea/workflows/sec-blackbox-decrypt.yml
+        uses: .gitea/workflows/sec-blackbox-decrypt.yml@main
         secrets:
           gpg-key: ${{ secrets.gpg-key }}
       - uses: hashicorp/setup-terraform@v2
@@ -78,7 +78,7 @@ jobs:
 
     steps:
       - name: Blackbox decrypt
-        uses: .gitea/workflows/sec-blackbox-decrypt.yml
+        uses: .gitea/workflows/sec-blackbox-decrypt.yml@main
         secrets:
           gpg-key: ${{ secrets.gpg-key }}
       - uses: hashicorp/setup-terraform@v2
diff --git a/.gitea/workflows/tf-plan.yml b/.gitea/workflows/tf-plan.yml
index 4feca87..bebfccd 100644
--- a/.gitea/workflows/tf-plan.yml
+++ b/.gitea/workflows/tf-plan.yml
@@ -18,7 +18,7 @@ jobs:
 
     steps:
       - name: Blackbox decrypt
-        uses: .gitea/workflows/sec-blackbox-decrypt.yml
+        uses: .gitea/workflows/sec-blackbox-decrypt.yml@main
         secrets:
           gpg-key: ${{ secrets.gpg-key }}
       - uses: hashicorp/setup-terraform@v2