diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 97e32f46..0442ca1c 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -44,7 +44,7 @@ jobs:
           args: release --clean --snapshot
 
       - name: Upload yardl binaries
-        uses: actions/upload-artifact@v7
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: dist
           path: dist