diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 646da41..6669674 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -18,8 +18,8 @@ jobs:
     strategy:
       fail-fast: false
     steps:
-      - uses: hyperwallet/public-security-workflows/codeql@main
+      - uses: hyperwallet/public-security-workflows/codeql@9c7e8d43f5171799410aff0726f79bc2550639dd
         with:
           language: javascript-typescript
           build-mode: 'none'
-          timeout-minutes: 25
\ No newline at end of file
+          timeout-minutes: 25