diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index b8c9e82..17cece4 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -43,7 +43,7 @@ jobs:
           extensions: mbstring
 
       - name: "Install dependencies"
-        uses: "ramsey/composer-install@v3"
+        uses: "ramsey/composer-install@65e4f84970763564f46a70b8a54b90d033b3bdda" # 4.0.0
         with:
           dependency-versions: "${{ matrix.dependencies }}"