diff --git a/gen/external-content/patch-templates/.github/workflows/ci.yaml b/gen/external-content/patch-templates/.github/workflows/ci.yaml
index a853ebe0..a0169157 100644
--- a/gen/external-content/patch-templates/.github/workflows/ci.yaml
+++ b/gen/external-content/patch-templates/.github/workflows/ci.yaml
@@ -11,13 +11,13 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
-      - uses: score-spec/setup-score@v2
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: score-spec/setup-score@9ce358a6641972930fbf1c91d93185fec520f7e4 # v3.1.8
         with:
           file: score-compose
           version: latest
           token: ${{ secrets.GITHUB_TOKEN }}
-      - uses: score-spec/setup-score@v2
+      - uses: score-spec/setup-score@9ce358a6641972930fbf1c91d93185fec520f7e4 # v3.1.8
         with:
           file: score-k8s
           version: latest
diff --git a/gen/external-content/patch-templates/score-compose/microcks.tpl b/gen/external-content/patch-templates/score-compose/microcks.tpl
index eca8d856..ed4f1dfe 100644
--- a/gen/external-content/patch-templates/score-compose/microcks.tpl
+++ b/gen/external-content/patch-templates/score-compose/microcks.tpl
@@ -1,7 +1,7 @@
 - op: set
   path: services.microcks
   value:
-    image: quay.io/microcks/microcks-uber:latest-native
+    image: quay.io/microcks/microcks-uber:nightly-native
     read_only: true
     user: "65532"
     cap_drop: ["ALL"]
@@ -12,4 +12,4 @@
     - type: tmpfs
       target: /tmp
       tmpfs:
-        size: 32768
+        size: 655360