diff --git a/.github/workflows/auto-dependabot.yaml b/.github/workflows/auto-dependabot.yaml
index e27ab0d..ca7d321 100644
--- a/.github/workflows/auto-dependabot.yaml
+++ b/.github/workflows/auto-dependabot.yaml
@@ -9,7 +9,7 @@ jobs:
     if: github.actor == 'dependabot[bot]'
     steps:
       - name: Auto-approve and merge Dependabot PRs
-        uses: frequenz-floss/dependabot-auto-approve@v1.3.0
+        uses: frequenz-floss/dependabot-auto-approve@005e52004f5d5c6af2f81b89ec25e5cf6f3dfd77 # v1.3.0
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           merge-method: merge