diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index a527c79..ebaf8cf 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -34,7 +34,7 @@ jobs:
           ruby-version: ${{ matrix.ruby }}
           bundler-cache: true
       - run: bundle exec rspec --color --format RSpec::Github::Formatter --format documentation
-      - uses: codecov/codecov-action@v5
+      - uses: codecov/codecov-action@57e3a136b779b570ffcdbf80b3bdc90e7fab3de2 # v6
         with:
           fail_ci_if_error: true
           token: ${{ secrets.CODECOV_TOKEN }}