diff --git a/.github/actions/setup-tooling/action.yaml b/.github/actions/setup-tooling/action.yaml
index 4df2d6c4..7dfcd648 100644
--- a/.github/actions/setup-tooling/action.yaml
+++ b/.github/actions/setup-tooling/action.yaml
@@ -28,7 +28,7 @@ runs:
   using: composite
   steps:
     - name: Setup pnpm
-      uses: pnpm/action-setup@v4
+      uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4
       with:
         version: ${{ inputs.pnpm-version }}
         run_install: false