diff --git a/.github/workflows/report.yml b/.github/workflows/report.yml
index d17a5eea9..2ae67d5f3 100644
--- a/.github/workflows/report.yml
+++ b/.github/workflows/report.yml
@@ -23,7 +23,7 @@ jobs:
           workflow: ${{ github.event.workflow.id }}
           run_id: ${{ github.event.workflow_run.id }}
       - name: Publish Test Report
-        uses: mikepenz/action-junit-report@v5
+        uses: mikepenz/action-junit-report@992d97d6eb2e5f3de985fbf9df6a04386874114d # v5
         with:
           commit: ${{github.event.workflow_run.head_sha}}
           report_paths: '**/build/test-results/test/TEST-*.xml'