diff --git a/.github/workflows/yocto-build-deploy.yml b/.github/workflows/yocto-build-deploy.yml
index 94d5d0ed9..73227aaf6 100644
--- a/.github/workflows/yocto-build-deploy.yml
+++ b/.github/workflows/yocto-build-deploy.yml
@@ -216,7 +216,7 @@ jobs:
       - name: Wait for approval on pull_request_target events
         if: github.event_name == 'pull_request_target' && github.event.pull_request.merged != true
         timeout-minutes: 90
-        uses: product-os/review-commit-action@v0.1.4
+        uses: product-os/review-commit-action@81db18cd263daeaa45dd38f976321a1823e54224 # v0.1.4
         with:
           poll-interval: '10'
           allow-authors: false