diff --git a/scripts/.github/workflows/rescript-deno-ci.yml b/scripts/.github/workflows/rescript-deno-ci.yml
index 5344c56..19b04f9 100644
--- a/scripts/.github/workflows/rescript-deno-ci.yml
+++ b/scripts/.github/workflows/rescript-deno-ci.yml
@@ -11,7 +11,7 @@ jobs:
       contents: read
     steps:
       - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
-      - uses: denoland/setup-deno@v2
+      - uses: denoland/setup-deno@22d081ff2d3a40755e97629de92e3bcbfa7cf2ed  # v2
         with:
           deno-version: v1.x
       
@@ -40,7 +40,7 @@ jobs:
       contents: read
     steps:
       - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
-      - uses: denoland/setup-deno@v2
+      - uses: denoland/setup-deno@22d081ff2d3a40755e97629de92e3bcbfa7cf2ed  # v2
       - name: Check permissions
         run: |
           # Audit for dangerous permissions