diff --git a/.github/workflows/renovate.yaml b/.github/workflows/renovate.yaml
index 87fcebf..3a6d921 100644
--- a/.github/workflows/renovate.yaml
+++ b/.github/workflows/renovate.yaml
@@ -28,7 +28,7 @@ jobs:
           private-key: ${{ secrets.RENOVATE_BOT_PRIVATE_KEY }}
           owner: ${{ github.repository_owner }}
       - name: Renovate
-        uses: WyriHaximus/github-action-renovatebot@v0.1.0
+        uses: WyriHaximus/github-action-renovatebot@4c2398bc32cd0cf1d54e5e22d253bdae464b8b02 # v0.1.0
         with:
           renovateAppToken: ${{ steps.app-token.outputs.token }}
 #          logLevel: info