diff --git a/.github/workflows/scheduler.yml b/.github/workflows/scheduler.yml
index 5fc77d7a..e86b21d9 100644
--- a/.github/workflows/scheduler.yml
+++ b/.github/workflows/scheduler.yml
@@ -93,7 +93,7 @@ jobs:
 
       - name: Commit and push
         if: github.event_name != 'pull_request' && github.ref == 'refs/heads/master'
-        uses: actions-js/push@v1.5
+        uses: actions-js/push@5a7cbd780d82c0c937b5977586e641b2fd94acc5  # v1.5
         with:
           github_token: ${{ secrets.GH_BOT_TOKEN }}
           author_email: ${{ secrets.GH_BOT_EMAIL }}