diff --git a/workflow-templates/triage.yml b/workflow-templates/triage.yml
index d7a96a9..bb1fab4 100644
--- a/workflow-templates/triage.yml
+++ b/workflow-templates/triage.yml
@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Add needs-triage label
-        uses: actions/github-script@v7
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
           script: |
             await github.rest.issues.addLabels({