diff --git a/.github/workflows/renovate_prune.yml b/.github/workflows/renovate_prune.yml
index 531b3c37..96f4ff40 100644
--- a/.github/workflows/renovate_prune.yml
+++ b/.github/workflows/renovate_prune.yml
@@ -23,7 +23,7 @@ jobs:
 
     steps:
       - name: Prune renovate branches
-        uses: actions/github-script@v6
+        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           script: |