diff --git a/.github/workflows/qa.yml b/.github/workflows/qa.yml
index a0d68e2..36e5624 100644
--- a/.github/workflows/qa.yml
+++ b/.github/workflows/qa.yml
@@ -90,7 +90,7 @@ jobs:
           slack_channel_id: ${{ env.SLACK_CHANNEL_ID }}
 
       - name: Setup Bun
-        uses: oven-sh/setup-bun@v2
+        uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2
         with:
           bun-version: latest