diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 8dcda20..2220267 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -21,7 +21,7 @@ jobs:
       - run: pnpm build
       - run: pnpm test:types
       - run: pnpm vitest --coverage
-      - uses: codecov/codecov-action@v6
+      - uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v7
         with: { token: "${{ secrets.CODECOV_TOKEN }}" }
   publish:
     runs-on: ubuntu-latest