diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 9331405..c1f7d6d 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -23,7 +23,7 @@ jobs:
           rpmbuild -ba pyenv.spec
 
       - name: Upload RPM to Gitea
-        uses: actions/upload-rpm@main
+        uses: actions/upload-rpm@6e75650b9a63a99a5b15b10e9fb4752c82bb0cb2 # main
         with:
           owner: lx_packages_rhel9
           token: "${{ secrets.PACKAGE_DEPLOY_TOKEN }}"