diff --git a/.github/workflows/release-branch.yaml b/.github/workflows/release-branch.yaml
index 5383dfb..2d2482f 100644
--- a/.github/workflows/release-branch.yaml
+++ b/.github/workflows/release-branch.yaml
@@ -42,7 +42,7 @@ jobs:
 
       - name: Find GitHub username by email
         id: find_user
-        uses: actions/github-script@v7
+        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
         with:
           script: |
             const email = process.env['AUTHOR_EMAIL'] || '${{ steps.last_author.outputs.author_email }}';