diff --git a/.github/workflows/claude-code-review.yml b/.github/workflows/claude-code-review.yml
index c6ecc43..349fd3b 100644
--- a/.github/workflows/claude-code-review.yml
+++ b/.github/workflows/claude-code-review.yml
@@ -22,7 +22,7 @@ jobs:
       # Action definition is always fetched from main, so PRs that edit it
       # don't affect the running version until merged.
       - name: Run Claude Code Review
-        uses: boneskull/gh-stack/.github/actions/claude-code-review@main
+        uses: boneskull/gh-stack/.github/actions/claude-code-review@e6c362dba3fd07f95b67943fdb414bf42e8507bf # main
         with:
           claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
           repository: ${{ github.repository }}