diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index e59ec5c..bda6b53 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -9,7 +9,7 @@ jobs:
       - uses: actions/setup-node@v2-beta
         with:
           node-version: 17.3.0
-      - uses: actions/setup-python@v2
+      - uses: actions/setup-python@0b93645e9fea7318ecaed2b359559ac225c90a2b # v5
         with:
           python-version: "3.9.x"
       - run: yarn install --frozen-lockfile