diff --git a/.github/workflows/yocto-build-deploy.yml b/.github/workflows/yocto-build-deploy.yml
index f846a4c0c..6f270cbfc 100644
--- a/.github/workflows/yocto-build-deploy.yml
+++ b/.github/workflows/yocto-build-deploy.yml
@@ -216,7 +216,7 @@ jobs:
       - name: Wait for approval on pull_request_target events
         if: github.event_name == 'pull_request_target' && github.event.pull_request.merged != true
         timeout-minutes: 90
-        uses: product-os/review-commit-action@v0.1.4
+        uses: product-os/review-commit-action@579759e1c641b0e345d910ef3ab03a6a3048bbb0 # v0.1.5
         with:
           poll-interval: '10'
           allow-authors: false