diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index 7a3060cd..56a83461 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -43,7 +43,7 @@ jobs:
 
       - name: Create Release
         if: startsWith(github.ref, 'refs/tags/')
-        uses: softprops/action-gh-release@v3
+        uses: softprops/action-gh-release@3d0d9888cb7fd7b750713d6e236d1fcb99157228 # v3.0.2
         with:
           body: ${{ steps.release_notes.outputs.release_notes }}
           files: diffuse/build/distributions/diffuse-*.zip