diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 576a1f8..2ecadc5 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -10,7 +10,7 @@ name: Release policy
 jobs:
   test:
     name: run tests and linters
-    uses: kubewarden/github-actions/.github/workflows/reusable-test-policy-rego.yml@v3.1.12
+    uses: kubewarden/github-actions/.github/workflows/reusable-test-policy-rego.yml@v3.1.20
     with:
       artifacthub: false
 
@@ -24,7 +24,7 @@ jobs:
       # Required by cosign keyless signing
       id-token: write
 
-    uses: kubewarden/github-actions/.github/workflows/reusable-release-policy-rego.yml@v3.1.12
+    uses: kubewarden/github-actions/.github/workflows/reusable-release-policy-rego.yml@v3.1.20
     with:
       oci-target: ghcr.io/${{ github.repository_owner }}/tests/context-aware-test-opa-policy
       artifacthub: false
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 191650b..c9ae2b7 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -3,6 +3,6 @@ name: Continuous integration
 jobs:
   test:
     name: run tests and linters
-    uses: kubewarden/github-actions/.github/workflows/reusable-test-policy-rego.yml@v3.1.12
+    uses: kubewarden/github-actions/.github/workflows/reusable-test-policy-rego.yml@v3.1.20
     with:
       artifacthub: false