diff --git a/.github/workflows/claude-code-review.yml b/.github/workflows/claude-code-review.yml
index c6ecc43..328897b 100644
--- a/.github/workflows/claude-code-review.yml
+++ b/.github/workflows/claude-code-review.yml
@@ -22,7 +22,7 @@ jobs:
       # Action definition is always fetched from main, so PRs that edit it
       # don't affect the running version until merged.
       - name: Run Claude Code Review
-        uses: boneskull/gh-stack/.github/actions/claude-code-review@main
+        uses: boneskull/gh-stack/.github/actions/claude-code-review@4c75ffd8986dbb289e0e1fa1f3c800d7a2d3c6bb # main
         with:
           claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
           repository: ${{ github.repository }}