diff --git a/.github/workflows/govulncheck.yml b/.github/workflows/govulncheck.yml
index 5498b4af..4c00f4fd 100644
--- a/.github/workflows/govulncheck.yml
+++ b/.github/workflows/govulncheck.yml
@@ -18,4 +18,4 @@ jobs:
       with:
         egress-policy: audit
     - name: Run govulncheck
-      uses: golang/govulncheck-action@v1
\ No newline at end of file
+      uses: golang/govulncheck-action@3a32958c2706f7048305d5a2e53633d7e37e97d0 # v1.0.2
\ No newline at end of file