diff --git a/.github/workflows/lint-and-test.yml b/.github/workflows/lint-and-test.yml
index 14bc84f..1025294 100644
--- a/.github/workflows/lint-and-test.yml
+++ b/.github/workflows/lint-and-test.yml
@@ -27,7 +27,7 @@ jobs:
           docsonnet main.libsonnet
 
       - name: import gpg signing key
-        uses: crazy-max/ghaction-import-gpg@72b6676b71ab476b77e676928516f6982eef7a41 # v5.3.0
+        uses: crazy-max/ghaction-import-gpg@d6f3f49f3345e29369fe57596a3ca8f94c4d2ca7 # v5.4.0
         with:
           gpg_private_key: ${{ secrets.TFLIBSONNET_CI_GPG_KEY }}
           passphrase: ${{ secrets.TFLIBSONNET_CI_GPG_PASSPHRASE }}