diff --git a/.github/workflows/qa.yml b/.github/workflows/qa.yml
index a606e76..73a0f99 100644
--- a/.github/workflows/qa.yml
+++ b/.github/workflows/qa.yml
@@ -283,7 +283,7 @@ jobs:
         if: |
           github.event_name == 'push' &&
           startsWith(github.ref, 'refs/tags/')
-        uses: helm/chart-releaser-action@v1.7.0
+        uses: helm/chart-releaser-action@cae68fefc6b5f367a0275617c9f83181ba54714f # v1.7.0
         env:
           CR_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         with: