diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml
index cb6450e836..ec153818d3 100644
--- a/.github/workflows/test.yaml
+++ b/.github/workflows/test.yaml
@@ -25,6 +25,6 @@ jobs:
       - name: Run test
         run: go test ./... -coverprofile=coverage.txt
       - name: Upload coverage to Codecov
-        uses: codecov/codecov-action@v3
+        uses: codecov/codecov-action@ab904c41d6ece82784817410c45d8b8c02684457 # v3
         env:
           CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}