diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 111f651..6e026be 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -28,7 +28,7 @@ jobs:
         run: go test -json ./... > go-test-results.json
 
       - name: Convert JSON to SARIF
-        uses: ivuorinen/go-test-sarif@v1
+        uses: ivuorinen/go-test-sarif@58ffaaacdb178a5d053f8e8c2693966422a3ecda # v1
         with:
           input_file: go-test-results.json
           output_file: go-test-results.sarif
diff --git a/action.yml b/action.yml
index 3a401fa..4509f48 100644
--- a/action.yml
+++ b/action.yml
@@ -12,7 +12,7 @@ runs:
   using: 'composite'
   steps:
     - name: Convert Go test results to SARIF
-      uses: ivuorinen/go-test-sarif@v1
+      uses: ivuorinen/go-test-sarif@58ffaaacdb178a5d053f8e8c2693966422a3ecda # v1
       with:
         input_file: ${{ inputs.input_file }}
         output_file: ${{ inputs.output_file }}