diff --git a/.github/workflows/label-sync.yaml b/.github/workflows/label-sync.yaml
index 02f7f32c9..be4c7cfcd 100644
--- a/.github/workflows/label-sync.yaml
+++ b/.github/workflows/label-sync.yaml
@@ -29,7 +29,7 @@ jobs:
           private-key: ${{ secrets.BOT_APP_PRIVATE_KEY }}
 
       - name: Setup Homebrew
-        uses: Homebrew/actions/setup-homebrew@master
+        uses: Homebrew/actions/setup-homebrew@b2a302b9a642580cae998e6ba2076ffd28e61317 # master
 
       - name: Setup Workflow Tools
         run: brew install go-task