diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 1b8b2d9..f007e51 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -11,7 +11,7 @@ permissions: {}
 
 jobs:
   ci:
-    uses: compliance-framework/workflows/.github/workflows/ci-policies.yml@e85d35af2af2ddfcd4b92061d2063e665c1831f6 # v1.7.0
+    uses: compliance-framework/workflows/.github/workflows/ci-policies.yml@eacc8f6a26bd7a98c72fbaf586a7b0687dee6eb0 # v1.8.0
     permissions:
       actions: read
       contents: read
@@ -20,14 +20,14 @@ jobs:
     secrets: inherit
 
   release-checks:
-    uses: compliance-framework/workflows/.github/workflows/release-checks.yml@e85d35af2af2ddfcd4b92061d2063e665c1831f6 # v1.7.0
+    uses: compliance-framework/workflows/.github/workflows/release-checks.yml@eacc8f6a26bd7a98c72fbaf586a7b0687dee6eb0 # v1.8.0
     permissions:
       contents: read
 
   notify:
     needs: [ci, release-checks]
     if: always()
-    uses: compliance-framework/workflows/.github/workflows/notify-failure.yml@e85d35af2af2ddfcd4b92061d2063e665c1831f6 # v1.7.0
+    uses: compliance-framework/workflows/.github/workflows/notify-failure.yml@eacc8f6a26bd7a98c72fbaf586a7b0687dee6eb0 # v1.8.0
     with:
       needs: ${{ toJSON(needs) }}
     permissions:
diff --git a/.github/workflows/cut-prerelease.yml b/.github/workflows/cut-prerelease.yml
index 4056b9f..d4119f3 100644
--- a/.github/workflows/cut-prerelease.yml
+++ b/.github/workflows/cut-prerelease.yml
@@ -5,7 +5,7 @@ permissions:
   contents: read
 jobs:
   cut:
-    uses: compliance-framework/workflows/.github/workflows/cut-prerelease.yml@e85d35af2af2ddfcd4b92061d2063e665c1831f6 # v1.7.0
+    uses: compliance-framework/workflows/.github/workflows/cut-prerelease.yml@eacc8f6a26bd7a98c72fbaf586a7b0687dee6eb0 # v1.8.0
     permissions:
       contents: read
     secrets: inherit
diff --git a/.github/workflows/preview.yml b/.github/workflows/preview.yml
index 562a640..7cd7d92 100644
--- a/.github/workflows/preview.yml
+++ b/.github/workflows/preview.yml
@@ -16,7 +16,7 @@ concurrency:
 
 jobs:
   preview:
-    uses: compliance-framework/workflows/.github/workflows/preview.yml@e85d35af2af2ddfcd4b92061d2063e665c1831f6 # v1.7.0
+    uses: compliance-framework/workflows/.github/workflows/preview.yml@eacc8f6a26bd7a98c72fbaf586a7b0687dee6eb0 # v1.8.0
     with:
       kind: policies
       on-main: false
diff --git a/.github/workflows/release-please.yml b/.github/workflows/release-please.yml
index 2fbf008..17de039 100644
--- a/.github/workflows/release-please.yml
+++ b/.github/workflows/release-please.yml
@@ -12,7 +12,7 @@ concurrency:
 
 jobs:
   release-please:
-    uses: compliance-framework/workflows/.github/workflows/release-please.yml@e85d35af2af2ddfcd4b92061d2063e665c1831f6 # v1.7.0
+    uses: compliance-framework/workflows/.github/workflows/release-please.yml@eacc8f6a26bd7a98c72fbaf586a7b0687dee6eb0 # v1.8.0
     permissions:
       contents: read
     secrets: inherit
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 0d56e73..237ec18 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -9,7 +9,7 @@ permissions:
 
 jobs:
   release:
-    uses: compliance-framework/workflows/.github/workflows/release-policies.yml@e85d35af2af2ddfcd4b92061d2063e665c1831f6 # v1.7.0
+    uses: compliance-framework/workflows/.github/workflows/release-policies.yml@eacc8f6a26bd7a98c72fbaf586a7b0687dee6eb0 # v1.8.0
     with:
       opa-version: "1.21.3"
       directory: policies