diff --git a/.github/workflows/publish-hotfix.yml b/.github/workflows/publish-hotfix.yml
index 05a6d20..6b8037a 100644
--- a/.github/workflows/publish-hotfix.yml
+++ b/.github/workflows/publish-hotfix.yml
@@ -35,7 +35,7 @@ jobs:
           npm test
 
       - name: Publish Hot Fix
-        uses: DEFRA/cdp-build-action/build-hotfix@v1.0.0
+        uses: DEFRA/cdp-build-action/build-hotfix@c7e726264e72772285d8f28314e6a5fce8a65f33 # v1.0.0
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}