diff --git a/.github/workflows/coverage.js.yml b/.github/workflows/coverage.js.yml
index 4e1cb5c..677959c 100644
--- a/.github/workflows/coverage.js.yml
+++ b/.github/workflows/coverage.js.yml
@@ -9,7 +9,7 @@ jobs:
         node-version: [20]
     steps:
       - uses: actions/checkout@v4
-      - uses: oven-sh/setup-bun@v1.2.1
+      - uses: oven-sh/setup-bun@f4d14e03ff726c06358e5557344e1da148b56cf7 # v1.2.2
         with:
           bun-version: latest
       - run: bun install