diff --git a/js-dependency-review/action.yml b/js-dependency-review/action.yml
index 1f571f2..f7c9225 100644
--- a/js-dependency-review/action.yml
+++ b/js-dependency-review/action.yml
@@ -12,7 +12,7 @@ runs:
         path: .github-actions
 
     - name: Dependency Review
-      uses: actions/dependency-review-action@v4
+      uses: actions/dependency-review-action@a1d282b36b6f3519aa1f3fc636f609c47dddb294 # v5.0.0
       with:
         fail-on-severity: high
         deny-licenses: LGPL-2.0, BSD-2-Clause