diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index e59ec5c..8e14c2b 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -9,7 +9,7 @@ jobs:
       - uses: actions/setup-node@v2-beta
         with:
           node-version: 17.3.0
-      - uses: actions/setup-python@v2
+      - uses: actions/setup-python@82c7e631bb3cdc910f68e0081d67478d79c6982d # v5
         with:
           python-version: "3.9.x"
       - run: yarn install --frozen-lockfile