diff --git a/.github/workflows/claude-review.yml b/.github/workflows/claude-review.yml
index c85ab11c..fdfa2f89 100644
--- a/.github/workflows/claude-review.yml
+++ b/.github/workflows/claude-review.yml
@@ -17,7 +17,7 @@ jobs:
         with:
           fetch-depth: 0
 
-      - uses: anthropics/claude-code-action@v1
+      - uses: anthropics/claude-code-action@a08f8913d58013599003b37d3a9174d27e99ac90 # v1
         if: ${{ github.actor != 'dependabot[bot]' }}
         with:
           claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}