diff --git a/.github/workflows/flowzone.yml b/.github/workflows/flowzone.yml
index 02e1d3643b..0d11cd79b3 100644
--- a/.github/workflows/flowzone.yml
+++ b/.github/workflows/flowzone.yml
@@ -1,18 +1,17 @@
 name: Flowzone
-
 on:
   pull_request:
     types: [opened, synchronize, closed]
     branches:
       - "main"
       - "master"
-
 jobs:
   flowzone:
     name: Flowzone
-    uses: product-os/flowzone/.github/workflows/flowzone.yml@master
+    uses: product-os/flowzone/.github/workflows/flowzone.yml@b650402ce45da8af2f0e226ab0e45ccf2dde115a # 4199286565-1
     secrets: inherit
     with:
       # https://github.com/golang/go/blob/master/src/go/build/syslist.go
       custom_publish_matrix: "linux/arm/v5,linux/arm/v6,linux/arm/v7,linux/arm64,linux/amd64,linux/386"
       cloudflare_website: "balena-engine"
+      protect_branch: false