diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 97e32f46..d6b3df7b 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -38,7 +38,7 @@ jobs:
         uses: ./.github/actions/configure-environment
 
       - name: Build yardl binaries for multiple platforms
-        uses: goreleaser/goreleaser-action@v7
+        uses: goreleaser/goreleaser-action@a4f02ab5355a589de60d917a659ce617ed19b3de # v7.3.0
         with:
           version: v2.8.1
           args: release --clean --snapshot
@@ -223,7 +223,7 @@ jobs:
           dirname $(which go) >> $GITHUB_PATH
 
       - name: Run GoReleaser
-        uses: goreleaser/goreleaser-action@v7
+        uses: goreleaser/goreleaser-action@a4f02ab5355a589de60d917a659ce617ed19b3de # v7.3.0
         with:
           version: v2.8.1
           args: release --clean