diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 835dbf7..09bd565 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -44,7 +44,7 @@ jobs:
         run: |
           cargo test --locked --manifest-path rust/iscy-backend/Cargo.toml
       - name: Install verified Rust supply-chain tools
-        uses: taiki-e/install-action@065d6a08a14e61e89fb0a4c10eecdbdef39c7d8e # v2
+        uses: taiki-e/install-action@cb33e69fad06166ca28a42b2575e4dadabf62ee8 # v2
         with:
           tool: cargo-audit,cargo-deny
           fallback: none