diff --git a/.github/workflows/pr_best_practices.yml b/.github/workflows/pr_best_practices.yml
index 73dcacd7abd..2d1729ec51a 100644
--- a/.github/workflows/pr_best_practices.yml
+++ b/.github/workflows/pr_best_practices.yml
@@ -12,7 +12,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: PR best practice check
-        uses: osbuild/pr-best-practices@main
+        uses: osbuild/pr-best-practices@7ddf8ce153d6fc43bc6bf4f4b9a3ab6973c10d79 # main
         with:
           token: ${{ secrets.SCHUTZBOT_GITHUB_ACCESS_TOKEN }}
           jira_token: ${{ secrets.IMAGE_BUILDER_BOT_JIRA_API_TOKEN }}