diff --git a/.github/workflows/cross.yml b/.github/workflows/cross.yml
index 99e5e2651..30738d235 100644
--- a/.github/workflows/cross.yml
+++ b/.github/workflows/cross.yml
@@ -34,7 +34,7 @@ jobs:
     steps:
       - uses: actions/checkout@v3
       - run: ${{ matrix.deps }}
-      - uses: risc0/risc0/.github/actions/rustup
+      - uses: risc0/risc0/.github/actions/rustup@main
         with:
           toolchain: ${{ matrix.rust }}
           targets: ${{ matrix.target }}
diff --git a/.github/workflows/curve25519-dalek.yml b/.github/workflows/curve25519-dalek.yml
index ca582208b..ec4ef55d6 100644
--- a/.github/workflows/curve25519-dalek.yml
+++ b/.github/workflows/curve25519-dalek.yml
@@ -36,7 +36,7 @@ jobs:
           - target: x86_64-unknown-linux-gnu
     steps:
       - uses: actions/checkout@v3
-      - uses: risc0/risc0/.github/actions/rustup
+      - uses: risc0/risc0/.github/actions/rustup@main
       - run: rustup target add ${{ matrix.target }}
       - run: ${{ matrix.deps }}
       - env:
@@ -53,7 +53,7 @@ jobs:
           - crate: curve25519-dalek
     steps:
       - uses: actions/checkout@v3
-      - uses: risc0/risc0/.github/actions/rustup
+      - uses: risc0/risc0/.github/actions/rustup@main
         with:
           toolchain: stable
           targets: thumbv7em-none-eabi
@@ -82,7 +82,7 @@ jobs:
           - target: x86_64-unknown-linux-gnu
     steps:
       - uses: actions/checkout@v3
-      - uses: risc0/risc0/.github/actions/rustup
+      - uses: risc0/risc0/.github/actions/rustup@main
       - run: rustup target add ${{ matrix.target }}
       - run: ${{ matrix.deps }}
       - env:
@@ -94,7 +94,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v3
-      - uses: risc0/risc0/.github/actions/rustup
+      - uses: risc0/risc0/.github/actions/rustup@main
         with:
           toolchain: stable
           targets: wasm32-unknown-unknown,x86_64-unknown-linux-gnu,i686-unknown-linux-gnu
@@ -105,7 +105,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@v3
-    - uses: risc0/risc0/.github/actions/rustup
+    - uses: risc0/risc0/.github/actions/rustup@main
     - env:
         # This will:
         #   1) build all of the x86_64 SIMD code,
@@ -121,7 +121,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@v3
-    - uses: risc0/risc0/.github/actions/rustup
+    - uses: risc0/risc0/.github/actions/rustup@main
     - env:
         # This will run AVX2-specific tests and run all of the normal tests
         # with the AVX2 backend, even if the runner supports AVX512.
@@ -137,7 +137,7 @@ jobs:
     - uses: actions/checkout@v3
     # First run `cargo +nightly -Z minimal-verisons check` in order to get a
     # Cargo.lock with the oldest possible deps
-    - uses: risc0/risc0/.github/actions/rustup
+    - uses: risc0/risc0/.github/actions/rustup@main
     - env:
         INPUT_TOOLCHAIN: 'nightly'
     - run: cargo -Z minimal-versions check --no-default-features --features serde
diff --git a/.github/workflows/ed25519-dalek.yml b/.github/workflows/ed25519-dalek.yml
index f4f491741..914c9211a 100644
--- a/.github/workflows/ed25519-dalek.yml
+++ b/.github/workflows/ed25519-dalek.yml
@@ -26,7 +26,7 @@ jobs:
     - uses: actions/checkout@v3
       # Now run `cargo +nightly -Z minimal-verisons check` in order to get a
       # Cargo.lock with the oldest possible deps
-    - uses: risc0/risc0/.github/actions/rustup
+    - uses: risc0/risc0/.github/actions/rustup@main
     - env:
         INPUT_TOOLCHAIN: 'nightly'
     - run: cargo -Z minimal-versions check --no-default-features --features serde
diff --git a/.github/workflows/workspace.yml b/.github/workflows/workspace.yml
index 01976e288..c752c1f65 100644
--- a/.github/workflows/workspace.yml
+++ b/.github/workflows/workspace.yml
@@ -37,7 +37,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@v3
-    - uses: risc0/risc0/.github/actions/rustup
+    - uses: risc0/risc0/.github/actions/rustup@main
     - env:
         INPUT_TOOLCHAIN: 'nightly'
     - run: cargo test
@@ -47,7 +47,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@v3
-    - uses: risc0/risc0/.github/actions/rustup
+    - uses: risc0/risc0/.github/actions/rustup@main
     - name: Build u32 bench
       env:
         RUSTFLAGS: '--cfg curve25519_dalek_bits="32"'
@@ -71,7 +71,7 @@ jobs:
           - crate: x25519-dalek
     steps:
       - uses: actions/checkout@v3
-      - uses: risc0/risc0/.github/actions/rustup
+      - uses: risc0/risc0/.github/actions/rustup@main
         with:
           toolchain: stable
           targets: thumbv7em-none-eabi
@@ -87,7 +87,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@v3
-    - uses: risc0/risc0/.github/actions/rustup
+    - uses: risc0/risc0/.github/actions/rustup@main
       with:
         components: clippy
     - env:
@@ -99,7 +99,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@v3
-    - uses: risc0/risc0/.github/actions/rustup
+    - uses: risc0/risc0/.github/actions/rustup@main
       with:
         components: rustfmt
     - run: cargo fmt --all -- --check
@@ -109,7 +109,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v3
-      - uses: risc0/risc0/.github/actions/rustup
+      - uses: risc0/risc0/.github/actions/rustup@main
         with:
           toolchain: stable
       - run: cargo doc --all-features
diff --git a/.github/workflows/x25519-dalek.yml b/.github/workflows/x25519-dalek.yml
index 405586fb0..56d454ed5 100644
--- a/.github/workflows/x25519-dalek.yml
+++ b/.github/workflows/x25519-dalek.yml
@@ -26,7 +26,7 @@ jobs:
     - uses: actions/checkout@v3
       # Now run `cargo +nightly -Z minimal-verisons check` in order to get a
       # Cargo.lock with the oldest possible deps
-    - uses: risc0/risc0/.github/actions/rustup
+    - uses: risc0/risc0/.github/actions/rustup@main
     - env:
         INPUT_TOOLCHAIN: 'nightly'
     - run: cargo -Z minimal-versions check --no-default-features --features serde