diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 7edc62a03..031e006c1 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -6,7 +6,7 @@ on:
   workflow_dispatch:
   workflow_call:
     inputs:
-      ref:
+      target:
         required: true
         type: string
 
@@ -20,7 +20,7 @@ jobs:
       - name: Checkout branch
         uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2
         with:
-          ref: ${{ inputs.ref }}
+          ref: ${{ inputs.target }}
           submodules: recursive
 
       - name: Setup .NET
diff --git a/.github/workflows/create-prerelease.yml b/.github/workflows/create-prerelease.yml
index 50ffcc2b7..138e29a96 100644
--- a/.github/workflows/create-prerelease.yml
+++ b/.github/workflows/create-prerelease.yml
@@ -81,6 +81,6 @@ jobs:
     if: ${{ needs.check-if-release-needed.outputs.has-new-commits == 'true' }}
     uses: ./.github/workflows/publish-release.yml
     with:
-      ref: ${{ github.event.ref }}
+      target: ${{ github.event.ref }}
       tag: nightly
       prerelease: true
diff --git a/.github/workflows/harden-ci-security.yml b/.github/workflows/harden-ci-security.yml
index 0cd0b6016..7268a9d43 100644
--- a/.github/workflows/harden-ci-security.yml
+++ b/.github/workflows/harden-ci-security.yml
@@ -5,7 +5,7 @@ name: Harden CI security
 on:
   workflow_call:
     inputs:
-      ref:
+      target:
         required: true
         type: string
 
@@ -15,5 +15,7 @@ jobs:
     steps:
       - name: Checkout code
         uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2
+        with:
+          ref: ${{ inputs.target }}
       - name: Ensure all actions are pinned to a specific commit
         uses: zgosalvez/github-actions-ensure-sha-pinned-actions@555a30da2656b4a7cf47b107800bef097723363e # v2.1.3
diff --git a/.github/workflows/on-push-master.yml b/.github/workflows/on-push-master.yml
index 10584a96d..8a53b2ae5 100644
--- a/.github/workflows/on-push-master.yml
+++ b/.github/workflows/on-push-master.yml
@@ -13,10 +13,10 @@ jobs:
   run-tests:
     uses: ./.github/workflows/run-tests.yml
     with:
-      ref: ${{ github.event.ref }}
+      target: ${{ github.event.ref }}
 
   publish-release:
     uses: ./.github/workflows/publish-release.yml
     with:
-      ref: ${{ github.event.ref }}
+      target: ${{ github.event.ref }}
       tag: latest
diff --git a/.github/workflows/on-push-other-branch.yml b/.github/workflows/on-push-other-branch.yml
index fb75d656f..2fd4b5bd3 100644
--- a/.github/workflows/on-push-other-branch.yml
+++ b/.github/workflows/on-push-other-branch.yml
@@ -13,4 +13,4 @@ jobs:
   run-tests:
     uses: ./.github/workflows/run-tests.yml
     with:
-      ref: ${{ github.event.ref }}
+      target: ${{ github.event.ref }}
diff --git a/.github/workflows/on-push-pr.yml b/.github/workflows/on-push-pr.yml
index 09c97102f..0c4437579 100644
--- a/.github/workflows/on-push-pr.yml
+++ b/.github/workflows/on-push-pr.yml
@@ -9,9 +9,9 @@ jobs:
   harden-ci-security:
     uses: ./.github/workflows/harden-ci-security.yml
     with:
-      ref: ${{ github.event.pull_request.head.sha }}
+      target: ${{ github.event.pull_request.head.sha }}
 
   run-tests-for-pr:
     uses: ./.github/workflows/run-tests.yml
     with:
-      ref: ${{ github.event.pull_request.head.sha }}
+      target: ${{ github.event.pull_request.head.sha }}
diff --git a/.github/workflows/on-update-dot-github.yml b/.github/workflows/on-update-dot-github.yml
index 767252936..4b27c59c9 100644
--- a/.github/workflows/on-update-dot-github.yml
+++ b/.github/workflows/on-update-dot-github.yml
@@ -11,4 +11,4 @@ jobs:
   harden-ci-security:
     uses: ./.github/workflows/harden-ci-security.yml
     with:
-      ref: ${{ github.event.ref }}
+      target: ${{ github.event.ref }}
diff --git a/.github/workflows/publish-release.yml b/.github/workflows/publish-release.yml
index 77fce65ca..0f408cef0 100644
--- a/.github/workflows/publish-release.yml
+++ b/.github/workflows/publish-release.yml
@@ -5,7 +5,7 @@ name: Publish release
 on:
   workflow_call:
     inputs:
-      ref:
+      target:
         description: "The git ref to checkout, build from and release"
         required: true
         type: string
@@ -69,7 +69,7 @@ jobs:
   build:
     uses: ./.github/workflows/build.yml
     with:
-      ref: ${{ inputs.ref }}
+      target: ${{ inputs.target }}
 
   publish-release:
     runs-on: ubuntu-latest
@@ -159,7 +159,7 @@ jobs:
       - name: Publish release
         uses: notpeelz/action-gh-create-release@a12edfc71daf5daa7922b931c28e2bf88d3b2ced # v5.0.0
         with:
-          target: ${{ inputs.ref }}
+          target: ${{ inputs.target }}
           tag: ${{ inputs.tag }}
           prerelease: ${{ inputs.prerelease }}
           strategy: replace
diff --git a/.github/workflows/run-tests.yml b/.github/workflows/run-tests.yml
index 784152c8d..ffd50cce9 100644
--- a/.github/workflows/run-tests.yml
+++ b/.github/workflows/run-tests.yml
@@ -5,7 +5,7 @@ name: Run tests
 on:
   workflow_call:
     inputs:
-      ref:
+      target:
         required: true
         type: string
 
@@ -17,7 +17,7 @@ jobs:
         uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2
         with:
           repository: ${{ inputs.repository }}
-          ref: ${{ inputs.ref }}
+          target: ${{ inputs.target }}
           submodules: recursive
 
       - name: Setup .NET