diff --git a/.github/workflows/ethicalcheck.yml b/.github/workflows/ethicalcheck.yml
index 6ddb07f1..3a109cfb 100644
--- a/.github/workflows/ethicalcheck.yml
+++ b/.github/workflows/ethicalcheck.yml
@@ -61,6 +61,6 @@ jobs:
           sarif-result-file: "ethicalcheck-results.sarif"
 
        - name: Upload sarif file to repository
-         uses: github/codeql-action/upload-sarif@v3
+         uses: github/codeql-action/upload-sarif@45580472a5bb82c4681c4ac726cfdb60060c2ee1 # v3
          with:
           sarif_file: ./ethicalcheck-results.sarif