diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 206f62511..1eb014c76 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -20,7 +20,7 @@ jobs:
 
     # Release-please creates a PR that tracks all changes
     steps:
-      - uses: googleapis/release-please-action@v5
+      - uses: googleapis/release-please-action@45996ed1f6d02564a971a2fa1b5860e934307cf7 # v5
         id: release
         with:
           token: ${{secrets.RELEASE_PLEASE_ACTION_TOKEN}}