diff --git a/.github/actions/setup/action.yml b/.github/actions/setup/action.yml
index f4c825e899..c309693b5e 100644
--- a/.github/actions/setup/action.yml
+++ b/.github/actions/setup/action.yml
@@ -34,7 +34,7 @@ runs:
         shell: bash
         run: echo "nx-github-actions" | sudo tee /etc/machine-id > /dev/null
       - name: Setup pnpm
-        uses: pnpm/action-setup@v4
+        uses: pnpm/action-setup@b906affcce14559ad1aafd4ab0e942779e9f58b1 # v4
       - name: Setup Node
         uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
         with: