diff --git a/.github/workflows/deploy.yaml b/.github/workflows/deploy.yaml
index 35b6945..0603bf4 100644
--- a/.github/workflows/deploy.yaml
+++ b/.github/workflows/deploy.yaml
@@ -84,7 +84,7 @@ jobs:
       # has been bootstrapped (see README).
       - name: Configure AWS credentials
         if: ${{ steps.rel.outputs.release == 'true' && steps.rel.outputs.kind != 'patch' && vars.RELEASE_NOTIFY_INVOKE_ROLE_ARN != '' }}
-        uses: aws-actions/configure-aws-credentials@v6
+        uses: aws-actions/configure-aws-credentials@254c19bd240aabef8777f48595e9d2d7b972184b # v6
         with:
           role-to-assume: ${{ vars.RELEASE_NOTIFY_INVOKE_ROLE_ARN }}
           aws-region: us-east-1