diff --git a/.github/workflows/gitleaks.yaml b/.github/workflows/gitleaks.yaml
index 3df74d9..dcc841e 100644
--- a/.github/workflows/gitleaks.yaml
+++ b/.github/workflows/gitleaks.yaml
@@ -15,4 +15,4 @@ jobs:
         with:
           fetch-depth: '0'
       - name: gitleaks-action
-        uses: giantswarm/gitleaks-action@main
+        uses: giantswarm/gitleaks-action@858fcb6611d238db1a344ae267689bd5e3b9a6dc # main