diff --git a/.github/workflows/deploy.yaml b/.github/workflows/deploy.yaml
index 8e6c4dd..b0540cc 100644
--- a/.github/workflows/deploy.yaml
+++ b/.github/workflows/deploy.yaml
@@ -30,7 +30,7 @@ jobs:
       run: |
         source "$(nix build .#inject-secrets --no-link --print-out-paths)"/bin/install-agenix-shell
         echo "CACHIX_AUTH_TOKEN=$CACHIX_AUTH_TOKEN" > $GITHUB_OUTPUT
-    - uses: cachix/cachix-action@v14
+    - uses: cachix/cachix-action@132bc971f5f5691aadd0d1de82b438c366178557
       with:
         name: nix-pizza
         authToken: ${{ steps.retrieve-cachix-auth-token.outputs.CACHIX_AUTH_TOKEN }}