diff --git a/.github/workflows/run-system-tests.yaml b/.github/workflows/run-system-tests.yaml
index 4b0ad663659..ddf05994497 100644
--- a/.github/workflows/run-system-tests.yaml
+++ b/.github/workflows/run-system-tests.yaml
@@ -62,7 +62,7 @@ jobs:
     needs:
     - build
     # If you change the following comment, update the pattern in the update_system_test_reference.sh script to match.
-    uses: DataDog/system-tests/.github/workflows/system-tests.yml@main # system tests are pinned on release branches only
+    uses: DataDog/system-tests/.github/workflows/system-tests.yml@0c799cfe05576ad90d1b267a8de91d5f0fc1c153 # system tests are pinned on release branches only
     permissions:
       contents: read
       id-token: write
@@ -70,7 +70,7 @@ jobs:
     with:
       library: java
        # If you change the following comment, update the pattern in the update_system_test_reference.sh script to match.
-      ref: "main" # system tests are pinned on release branches only
+      ref: "0c799cfe05576ad90d1b267a8de91d5f0fc1c153" # system tests are pinned on release branches only
       binaries_artifact: binaries
       desired_execution_time: 900  # 15 minutes
       scenarios_groups: tracer-release
diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 3cc442ea1d9..fb76d6e3ad5 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -1470,7 +1470,7 @@ publishing-gate:
 
 configure_system_tests:
   variables:
-    SYSTEM_TESTS_REF: "main" # system tests are pinned on release branches only
+    SYSTEM_TESTS_REF: "0c799cfe05576ad90d1b267a8de91d5f0fc1c153" # system tests are pinned on release branches only
     SYSTEM_TESTS_SCENARIOS_GROUPS: "simple_onboarding,simple_onboarding_profiling,simple_onboarding_appsec,docker-ssi,lib-injection"
 
 create_key: