diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 962fe6d..d445245 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -59,7 +59,7 @@ jobs:
       run: lein cloverage
 
     - name: Push coverage to Coveralls.io
-      uses: coverallsapp/github-action@master
+      uses: coverallsapp/github-action@8d6379e14d29928660c4ba802d8e85393440b329 # v2.3.8
       with:
         path-to-lcov: target/coverage/lcov.info
         github-token: ${{ secrets.GITHUB_TOKEN }}