diff --git a/.github/workflows/copilot-setup-steps.yml b/.github/workflows/copilot-setup-steps.yml
index d5e319e5..ffb6f8fd 100644
--- a/.github/workflows/copilot-setup-steps.yml
+++ b/.github/workflows/copilot-setup-steps.yml
@@ -21,7 +21,7 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
         with:
           persist-credentials: false
 
@@ -31,7 +31,7 @@ jobs:
 
       - name: Set up PHP environment
         if: steps.check_composer_file.outputs.files_exists == 'true'
-        uses: shivammathur/setup-php@7c071dfe9dc99bdf297fa79cb49ea005b9fcadbc # v2
+        uses: shivammathur/setup-php@f3e473d116dcccaddc5834248c87452386958240 # v2
         with:
           php-version: 'latest'
           ini-values: zend.assertions=1, error_reporting=-1, display_errors=On
diff --git a/README.md b/README.md
index aee0b530..8933a041 100644
--- a/README.md
+++ b/README.md
@@ -173,7 +173,7 @@ Subsequent uses of command will use the local cache if it still exists.
 Runs the standard WordPress installation process.
 
 ~~~
-wp core install --url=<url> --title=<site-title> --admin_user=<username> [--admin_password=<password>] --admin_email=<email> [--locale=<locale>] [--skip-email]
+wp core install --url=<url> --title=<site-title> --admin_user=<username> [--admin_password|admin_pass=<password>] --admin_email=<email> [--locale=<locale>] [--skip-email]
 ~~~
 
 Creates the WordPress tables in the database using the URL, title, and
@@ -201,7 +201,7 @@ user_login doesn't exist, a new user will be created.
 	--admin_user=<username>
 		The name of the admin user.
 
-	[--admin_password=<password>]
+	[--admin_password|admin_pass=<password>]
 		The password for the admin user. Defaults to randomly generated string.
 
 	--admin_email=<email>
diff --git a/src/Core_Command.php b/src/Core_Command.php
index b65f7c01..b2cb31ec 100644
--- a/src/Core_Command.php
+++ b/src/Core_Command.php
@@ -502,7 +502,7 @@ public function is_installed( $args, $assoc_args ) {
 	 * --admin_user=<username>
 	 * : The name of the admin user.
 	 *
-	 * [--admin_password=<password>]
+	 * [--admin_password|admin_pass=<password>]
 	 * : The password for the admin user. Defaults to randomly generated string.
 	 *
 	 * --admin_email=<email>