diff --git a/.github/workflows/on-pull-request.yml b/.github/workflows/on-pull-request.yml
index 211319b..99b06f9 100644
--- a/.github/workflows/on-pull-request.yml
+++ b/.github/workflows/on-pull-request.yml
@@ -47,7 +47,7 @@ jobs:
           echo "Will perform $bump version bump on merge"
 
       - name: Comment on PR
-        uses: actions/github-script@v7
+        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
         with:
           script: |
             const bump = '${{ steps.version.outputs.bump }}';