diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index e59ec5c..0ff50de 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -9,7 +9,7 @@ jobs:
       - uses: actions/setup-node@v2-beta
         with:
           node-version: 17.3.0
-      - uses: actions/setup-python@v2
+      - uses: actions/setup-python@39cd14951b08e74b54015e9e001cdefcf80e669f # v5
         with:
           python-version: "3.9.x"
       - run: yarn install --frozen-lockfile