diff --git a/.github/workflows/staged-release.yml b/.github/workflows/staged-release.yml
index e5ffd1f5..413de3b4 100644
--- a/.github/workflows/staged-release.yml
+++ b/.github/workflows/staged-release.yml
@@ -87,7 +87,7 @@ jobs:
 
       - name: Codesign and Notarize
         id: codesign
-        uses: block/apple-codesign-action@v1.1.0
+        uses: block/apple-codesign-action@679535d1ab7c5a7c18e6f9afcba3464512cc3dde # v1.1.0
         with:
           osx-codesign-role: ${{ secrets.OSX_CODESIGN_ROLE }}
           codesign-s3-bucket: ${{ secrets.CODESIGN_S3_BUCKET }}