diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index ad441f25..2f537783 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -29,7 +29,7 @@ jobs:
         if [ -s fmt.patch ]; then
           exit 1
         fi
-    - uses: actions/github-script@v7
+    - uses: actions/github-script@e69ef5462fd455e02edcaf4dd7708eda96b9eda0 # v7
       if: failure() && steps.clang_format.outcome == 'failure'
       with:
         script: |