diff --git a/.github/workflows/obs.yml b/.github/workflows/obs.yml
index cadc973..78ed764 100644
--- a/.github/workflows/obs.yml
+++ b/.github/workflows/obs.yml
@@ -239,7 +239,7 @@ jobs:
         if: ${{ inputs.skip-bundles == false && github.event_name != 'pull_request' }}
       - uses: kubernetes-sigs/release-actions/setup-bom@8753ea6bdadb814d779c6ec34eaca689dbfb492b # v0.4.3
         if: ${{ inputs.skip-bundles == false && github.event_name != 'pull_request' }}
-      - uses: oras-project/setup-oras@ae766895f02b3941ff5d1d809f428d623db3ce11 # main (ORAS 1.3.1 support)
+      - uses: oras-project/setup-oras@ce8d0d55dab2d3477164591e9327b5632572a070 # main (ORAS 1.3.1 support)
         if: ${{ inputs.skip-bundles == false && github.event_name != 'pull_request' }}
         with:
           version: 1.3.1