diff --git a/.gitea/workflows/signing.yaml b/.gitea/workflows/signing.yaml
index e154dee..f59e8d1 100644
--- a/.gitea/workflows/signing.yaml
+++ b/.gitea/workflows/signing.yaml
@@ -13,11 +13,13 @@ jobs:
         run: ls -la
       - name: Sign
         id: sign
-        uses: https://git.lerch.org/lobo/action-hsm-sign@v1
+        uses: https://git.lerch.org/lobo/action-hsm-sign@8bf352b
         with:
           pin: ${{ secrets.HSM_USER_PIN }}
           files: ???
           public_key: 'https://emil.lerch.org/serverpublic.pem'
+          uhub_port: '4'
+          uhub_location: '1-1.3'
       - run: |
           echo "Source 0 should be ./bar: ${{ steps.sign.outputs.SOURCE_0 }}"
       - run: |