diff --git a/.github/workflows/psalm-security.yml b/.github/workflows/psalm-security.yml
index 0e19cda2d3..2740ab3ef1 100644
--- a/.github/workflows/psalm-security.yml
+++ b/.github/workflows/psalm-security.yml
@@ -16,7 +16,7 @@ jobs:
         with:
           submodules: recursive
       - name: Psalm
-        uses: docker://vimeo/psalm-github-actions
+        uses: docker://vimeo/psalm-github-actions@sha256:5307bec3ebea23668d287d14eca393c5843653685d346d0c2c6ae1ae0fa6ce47
         with:
           security_analysis: true
           report_file: results.sarif