diff --git a/.github/workflows/build.python.yml b/.github/workflows/build.python.yml
index 3aa33cf7..5c8644a3 100644
--- a/.github/workflows/build.python.yml
+++ b/.github/workflows/build.python.yml
@@ -49,7 +49,7 @@ jobs:
           enable-cache: true
           cache-dependency-glob: "${{ inputs.working-directory }}/uv.lock"
 
-      - uses: actions/setup-python@v6
+      - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6
         with:
           python-version: ${{ inputs.python_version }}
 
diff --git a/.github/workflows/test.python.yml b/.github/workflows/test.python.yml
index 5a1d770c..85af46f8 100644
--- a/.github/workflows/test.python.yml
+++ b/.github/workflows/test.python.yml
@@ -20,6 +20,11 @@ on:
         required: false
         type: string
         default: "ubuntu-latest"
+      uv-operations:
+        required: false
+        type: string
+        default: "pytest"
+        description: "UV operations passed to uv run: uv run <operations>"
 
 jobs:
   test:
@@ -41,4 +46,4 @@ jobs:
 
       - name: Run tests
         working-directory: ${{ inputs.working-directory }}
-        run: uv run pytest
+        run: uv run ${{ inputs.uv-operations }}