diff --git a/.github/workflows/mirror-changelog.yml b/.github/workflows/mirror-changelog.yml
index 950d847..8cc16d0 100644
--- a/.github/workflows/mirror-changelog.yml
+++ b/.github/workflows/mirror-changelog.yml
@@ -27,7 +27,7 @@ jobs:
 
     steps:
       - name: Add Toolbox Release Notes to PR Body
-        uses: actions/github-script@v6
+        uses: actions/github-script@d7906e4ad0b1822421a7e6a35d5ca353c962f410 # v6
         env:
           REQUIRED_KEYWORDS: 'postgres'
         with: