diff --git a/.github/workflows/flox-publish.yml b/.github/workflows/flox-publish.yml
index d4fcea2..fde0d78 100644
--- a/.github/workflows/flox-publish.yml
+++ b/.github/workflows/flox-publish.yml
@@ -23,7 +23,7 @@ jobs:
         with:
           fetch-depth: 0
       - name: Install Flox
-        uses: flox/install-flox-action@v2
+        uses: flox/install-flox-action@5bb9eaaffbeaa699a8251a1ae21ecf4c8e0e37d4 # v2.7.0
       - name: Publish to Flox Catalog
         run: flox publish --org devbytes freight
         env: