diff --git a/.github/workflows/test-aws-secrets.yml b/.github/workflows/test-aws-secrets.yml
index 1bb343c..b62fde0 100644
--- a/.github/workflows/test-aws-secrets.yml
+++ b/.github/workflows/test-aws-secrets.yml
@@ -43,9 +43,13 @@ jobs:
       - name: Install Salesforce CLI
         run: npm install -g @salesforce/cli
 
+      # sf-jwt-login was merged into sf-org-login behind `auth-method` and no
+      # longer exists upstream. Pinned @v2 rather than @main: @main moves under
+      # us, which is how this call broke in the first place.
       - name: Salesforce JWT Login
-        uses: Gforce-Innovation-Kft/shared-github-actions/.github/actions/sf-jwt-login@main
+        uses: Gforce-Innovation-Kft/shared-github-actions/.github/actions/sf-org-login@v2
         with:
+          auth-method: jwt
           aws-region: ${{ github.event.inputs.aws-region || vars.AWS_REGION || 'eu-central-1' }}
           secret-name: ${{ github.event.inputs.secret-name || 'salesforce/gabor-devhub' }}
           aws-role-arn: ${{ vars.AWS_ROLE_ARN }}