diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index f3cf034..d9a0e6f 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -28,7 +28,7 @@ jobs:
         go test -race -covermode=atomic -coverprofile=coverage.out ./...
 
     - name: coverage
-      uses: codecov/codecov-action@v3
+      uses: codecov/codecov-action@c4cf8a4f03f0ac8585acb7c1b7ce3460ec15782f # v4
       with:
         token: ${{ secrets.CODECOV_TOKEN }}
         file: coverage.out