diff --git a/.github/workflows/update-geolite2.yml b/.github/workflows/update-geolite2.yml
index d038e6b5..0e4d6de4 100644
--- a/.github/workflows/update-geolite2.yml
+++ b/.github/workflows/update-geolite2.yml
@@ -160,7 +160,7 @@ jobs:
 
       - name: Report failure via GitHub Issue
         if: failure()
-        uses: actions/github-script@v7
+        uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7
         with:
           script: |
             const errorType = '${{ steps.checksum.outputs.error }}' || 'unknown';