diff --git a/.github/workflows/setup-clients.yaml b/.github/workflows/setup-clients.yaml
index db8a98cd898..9d0595740f2 100644
--- a/.github/workflows/setup-clients.yaml
+++ b/.github/workflows/setup-clients.yaml
@@ -27,7 +27,7 @@ jobs:
         with:
           format: "YYYY/MM/DD"
       - uses: actions/checkout@v4
-      - uses: ramsey/composer-install@v2
+      - uses: ramsey/composer-install@3cf229dc2919194e9e36783941438d17239e8520 # 3.1.1
       - name: Set up clients
         run: make setup-clients
       - name: Create Pull Request