diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml
index 3758db7..0dd9d65 100644
--- a/.github/workflows/security.yml
+++ b/.github/workflows/security.yml
@@ -40,7 +40,7 @@ jobs:
 
       # Security Scanning with gosec
       - name: Run gosec Security Scanner
-        uses: securego/gosec@v2.22.8
+        uses: securego/gosec@c9453023c4e81ebdb6dde29e22d9cd5e2285fb16 # v2.22.8
         with:
           args: '-fmt sarif -out gosec-results.sarif ./...'