diff --git a/.github/workflows/mirror-changelog.yml b/.github/workflows/mirror-changelog.yml
index 316583a..3f9f0bf 100644
--- a/.github/workflows/mirror-changelog.yml
+++ b/.github/workflows/mirror-changelog.yml
@@ -27,7 +27,7 @@ jobs:
 
     steps:
       - name: Add Toolbox Release Notes to PR Body
-        uses: actions/github-script@v6
+        uses: actions/github-script@d7906e4ad0b1822421a7e6a35d5ca353c962f410 # v6
         env:
           REQUIRED_KEYWORDS: 'mssql'
         with: