diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml
index e90acf7..6c1590f 100644
--- a/.github/workflows/publish.yaml
+++ b/.github/workflows/publish.yaml
@@ -42,7 +42,7 @@ jobs:
             type=semver,pattern={{major}}
             type=semver,pattern={{major}}.{{minor}}
 
-      - uses: docker/login-action@v4
+      - uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0
         with:
           username: jakewharton
           password: ${{ secrets.DOCKER_HUB_TOKEN }}