diff --git a/.github/workflows/industry-rook-ci.yml b/.github/workflows/industry-rook-ci.yml
index 9f0c050..5bfa75c 100644
--- a/.github/workflows/industry-rook-ci.yml
+++ b/.github/workflows/industry-rook-ci.yml
@@ -30,7 +30,7 @@ jobs:
           persist-credentials: false
       - uses: actions/setup-node@v7.0.0
         with:
-          node-version: 22
+          node-version: 22.23.4
       - name: Install the published Rook CLI
         run: npm install -g @testmuai/rook@latest
       - run: npm ci
diff --git a/.github/workflows/publish-skill.yml b/.github/workflows/publish-skill.yml
index 42c3eac..ed52c05 100644
--- a/.github/workflows/publish-skill.yml
+++ b/.github/workflows/publish-skill.yml
@@ -25,7 +25,7 @@ jobs:
           persist-credentials: false
       - uses: actions/setup-node@v7.0.0
         with:
-          node-version: '22'
+          node-version: '22.23.4'
           registry-url: https://registry.npmjs.org
       - name: Validate release input
         env:
diff --git a/.github/workflows/test-samples.yml b/.github/workflows/test-samples.yml
index 967d4a5..ddb6437 100644
--- a/.github/workflows/test-samples.yml
+++ b/.github/workflows/test-samples.yml
@@ -26,7 +26,7 @@ jobs:
           persist-credentials: false
       - uses: actions/setup-node@v7.0.0
         with:
-          node-version: "22"
+          node-version: "22.23.4"
       # `node --test` discovers every test/*.test.mjs file, so a new test file
       # joins without editing package.json or this workflow.
       - run: npm test
@@ -44,7 +44,7 @@ jobs:
           persist-credentials: false
       - uses: actions/setup-node@v7.0.0
         with:
-          node-version: "22"
+          node-version: "22.23.4"
       - run: npm ci
       - run: npm run setup
       - run: npm test
diff --git a/.github/workflows/test-scripts.yml b/.github/workflows/test-scripts.yml
index 8955f95..df53030 100644
--- a/.github/workflows/test-scripts.yml
+++ b/.github/workflows/test-scripts.yml
@@ -20,7 +20,7 @@ jobs:
 
       - uses: actions/setup-node@v4
         with:
-          node-version: "22"
+          node-version: "22.23.4"
 
       # Detect command drift against the current published CLI.
       - name: Install the current rook
@@ -58,5 +58,5 @@ jobs:
           persist-credentials: false
       - uses: actions/setup-node@v7.0.0
         with:
-          node-version: '22'
+          node-version: '22.23.4'
       - run: bash scripts/test-skill-installer.sh