diff --git a/.github/workflows/bump-version.yaml b/.github/workflows/bump-version.yaml
index 9a646a0f..f02377b7 100755
--- a/.github/workflows/bump-version.yaml
+++ b/.github/workflows/bump-version.yaml
@@ -120,7 +120,7 @@ jobs:
 
       - name: Setup Gitsign
         if: steps.command.outputs.command-name == 'bump'
-        uses: chainguard-dev/actions/setup-gitsign@79bd291c02ef97a833226e8da2cefaa775874fd2 # main
+        uses: chainguard-dev/actions/setup-gitsign@c69a264ec2a5934c3186c618f368fc1c86f16cff # v1.6.19
 
       - name: Commit pre-commit changes
         if: steps.command.outputs.command-name == 'bump'