diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index 5d52814..f77e9bf 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -21,7 +21,7 @@ jobs:
           # checkout this is an improved security measure.
           persist-credentials: false
           submodules: true
-      - uses: actions/cache@v3
+      - uses: actions/cache@6f8efc29b200d32929f49075959781ed54ec270c # tag=v3.5.0
         with:
           path: /.yarn/cache
           key: v1-${{hashFiles('yarn.lock')}}