diff --git a/.github/workflows/audit.yml b/.github/workflows/audit.yml
index 973995c..561d253 100644
--- a/.github/workflows/audit.yml
+++ b/.github/workflows/audit.yml
@@ -21,7 +21,7 @@ jobs:
     steps:
       - uses: actions/checkout@v5
       - name: Manual Trivy Setup
-        uses: aquasecurity/setup-trivy@v0.2.4
+        uses: aquasecurity/setup-trivy@ve07451d2e059ed86c2870430ea286b3a9e0bf241 #v0.2.6
         with:
           cache: true
       - name: Audit Docker image for amd64