diff --git a/.github/workflows/build-image-test.yaml b/.github/workflows/build-image-test.yaml
index e4a1be11f..18133154c 100644
--- a/.github/workflows/build-image-test.yaml
+++ b/.github/workflows/build-image-test.yaml
@@ -31,7 +31,7 @@ jobs:
 
       - name: Set up QEMU
         if: matrix.os != 'ubuntu-latest' || matrix.arch != 'amd64'
-        uses: docker/setup-qemu-action@v2
+        uses: docker/setup-qemu-action@2b82ce82d56a2a04d2637cd93a637ae1b359c0a7 # v2
         with:
           platforms: 'arm64'