diff --git a/.github/workflows/cicd.yml b/.github/workflows/cicd.yml
index e27e507..c5ceab4 100644
--- a/.github/workflows/cicd.yml
+++ b/.github/workflows/cicd.yml
@@ -158,7 +158,7 @@ jobs:
       run: echo "LATEST_RELEASE_TAG=$(git tag --list --sort=-v:refname release-* | head -1)" >> $GITHUB_ENV
 
     - name: Tag Release
-      uses: actions/github-script@v7
+      uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
       env:
         LATEST_RELEASE_TAG: ${{ env.LATEST_RELEASE_TAG }}
       with: