diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index b22aaec65..7272a1f2d 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -22,7 +22,7 @@ jobs:
         fetch-depth: 0
 
     - name: node
-      uses: actions/setup-node@v3
+      uses: actions/setup-node@8f152de45cc393bb48ce5d89d36b731f54556e65 # v4
       with:
         node-version: '18'
 
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index f08b0af7c..f54b4f395 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -23,7 +23,7 @@ jobs:
         fetch-depth: 0
 
     - name: node
-      uses: actions/setup-node@v3
+      uses: actions/setup-node@8f152de45cc393bb48ce5d89d36b731f54556e65 # v4
       with:
         node-version: '18'