diff --git a/.github/workflows/ci-format-test-lint.yml b/.github/workflows/ci-format-test-lint.yml
index 97d53bd..81c6c69 100644
--- a/.github/workflows/ci-format-test-lint.yml
+++ b/.github/workflows/ci-format-test-lint.yml
@@ -14,7 +14,7 @@ jobs:
         with:
           submodules: "recursive"
 
-      - uses: bazel-contrib/setup-bazel@0.19.0
+      - uses: bazel-contrib/setup-bazel@c5acdfb288317d0b5c0bbd7a396a3dc868bb0f86 # 0.19.0
         with:
           bazelisk-cache: true
           disk-cache: ${{ github.workflow }}
@@ -33,7 +33,7 @@ jobs:
         with:
           submodules: "recursive"
 
-      - uses: bazel-contrib/setup-bazel@0.19.0
+      - uses: bazel-contrib/setup-bazel@c5acdfb288317d0b5c0bbd7a396a3dc868bb0f86 # 0.19.0
         with:
           bazelisk-cache: true
           disk-cache: ${{ github.workflow }}