diff --git a/.github/workflows/govulncheck.yml b/.github/workflows/govulncheck.yml
index c219c6a5e5..e82a5a797c 100644
--- a/.github/workflows/govulncheck.yml
+++ b/.github/workflows/govulncheck.yml
@@ -14,7 +14,7 @@ jobs:
     name: Run govulncheck
     steps:
       - id: govulncheck
-        uses: golang/govulncheck-action@v1.0.1
+        uses: golang/govulncheck-action@7da72f730e37eeaad891fcff0a532d27ed737cd4 # v1.0.1
         with:
-           go-version-input: 1.20.8
-           go-package: ./...
+          go-version-input: 1.20.8
+          go-package: ./...