diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml
index ac43581fa7..0542331fde 100644
--- a/.github/workflows/test.yaml
+++ b/.github/workflows/test.yaml
@@ -26,7 +26,7 @@ jobs:
       - name: Run coverage
         run: go test ./... -race -coverprofile=coverage.out -covermode=atomic
       - name: Upload coverage to Codecov
-        uses: codecov/codecov-action@v3
+        uses: codecov/codecov-action@eaaf4bedf32dbdc6b720b63067d99c4d77d6047d # v3
 
       # - name: Fmt Test
       #   run: fmtFiles=$(make fmt); if [ "$fmtFiles" != "" ];then exit 1; fi