diff --git a/.github/workflows/setup-clients.yaml b/.github/workflows/setup-clients.yaml
index db8a98cd898..867f8b1bd84 100644
--- a/.github/workflows/setup-clients.yaml
+++ b/.github/workflows/setup-clients.yaml
@@ -27,7 +27,7 @@ jobs:
         with:
           format: "YYYY/MM/DD"
       - uses: actions/checkout@v4
-      - uses: ramsey/composer-install@v2
+      - uses: ramsey/composer-install@1919f6c305aea6ab10e6181a8ddf72317ad77e0e # 2.3.1
       - name: Set up clients
         run: make setup-clients
       - name: Create Pull Request