diff --git a/.github/workflows/update-geolite2.yml b/.github/workflows/update-geolite2.yml
index 7d541410..a79763e7 100644
--- a/.github/workflows/update-geolite2.yml
+++ b/.github/workflows/update-geolite2.yml
@@ -105,7 +105,7 @@ jobs:
 
       - name: Create Pull Request
         if: steps.checksum.outputs.needs_update == 'true'
-        uses: peter-evans/create-pull-request@v6
+        uses: peter-evans/create-pull-request@c5a7806660adbe173f04e3e038b0ccdcd758773c # v6
         with:
           title: "chore(docker): update GeoLite2-Country.mmdb checksum"
           body: |