diff --git a/.github/workflows/release-10_rc-automation.yml b/.github/workflows/release-10_rc-automation.yml
index d732113d11..740b1860e1 100644
--- a/.github/workflows/release-10_rc-automation.yml
+++ b/.github/workflows/release-10_rc-automation.yml
@@ -2,7 +2,8 @@ name: Release - RC automation
 on:
   push:
     branches:
-      - release-**v[0-9]+.[0-9]+.[0-9]+
+      - release-v[0-9]+.[0-9]+.[0-9]+
+      - release-parachains-v[0-9]+
   workflow_dispatch:
 
 jobs:
@@ -36,7 +37,7 @@ jobs:
           fi
 
       - name: Apply new tag
-        uses: tvdias/github-tagger@v0.0.2
+        uses: tvdias/github-tagger@ed7350546e3e503b5e942dffd65bc8751a95e49d # v0.0.2
         with:
           # We can't use the normal GITHUB_TOKEN for the following reason:
           # https://docs.github.com/en/actions/reference/events-that-trigger-workflows#triggering-new-workflows-using-a-personal-access-token
@@ -67,7 +68,7 @@ jobs:
           filename: .github/ISSUE_TEMPLATE/release-runtime.md
 
       - name: Send Matrix message
-        uses: s3krit/matrix-message-action@v0.0.3
+        uses: s3krit/matrix-message-action@70ad3fb812ee0e45ff8999d6af11cafad11a6ecf # v0.0.3
         if: steps.create-issue-checklist-client.outputs.url != '' && steps.create-issue-checklist-runtime.outputs.url != ''
         with:
           room_id: ${{ secrets.INTERNAL_CUMULUS_MATRIX_ROOM_ID }}