diff --git a/.github/workflows/spdx.yml b/.github/workflows/spdx.yml
index df1335a..9d61096 100644
--- a/.github/workflows/spdx.yml
+++ b/.github/workflows/spdx.yml
@@ -10,8 +10,13 @@ jobs:
   check-spdx-headers:
     runs-on: ubuntu-latest
     steps:
-    - name: checkout
-      uses: actions/checkout@v3
-    - uses: enarx/spdx@master
-      with:
-        licenses: Apache-2.0 BSD-3-Clause BSD-2-Clause MIT MPL-2.0
\ No newline at end of file
+      - name: checkout
+        uses: actions/checkout@v3
+      - uses: enarx/spdx@c3e8116ed31c31b3c2e58a26ba5cac407510ca37
+        with:
+          licenses: |-
+            Apache-2.0
+            BSD-3-Clause
+            BSD-2-Clause
+            MIT
+            MPL-2.0
\ No newline at end of file