diff --git a/.github/workflows/renovate_prune.yml b/.github/workflows/renovate_prune.yml
index 531b3c37..62ac5d42 100644
--- a/.github/workflows/renovate_prune.yml
+++ b/.github/workflows/renovate_prune.yml
@@ -23,7 +23,7 @@ jobs:
 
     steps:
       - name: Prune renovate branches
-        uses: actions/github-script@v6
+        uses: actions/github-script@d7906e4ad0b1822421a7e6a35d5ca353c962f410 # v6
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           script: |