diff --git a/.github/workflows/deploy.yaml b/.github/workflows/deploy.yaml
index 01e3a23..c168f65 100755
--- a/.github/workflows/deploy.yaml
+++ b/.github/workflows/deploy.yaml
@@ -21,7 +21,7 @@ jobs:
         with:
           fetch-depth: 0
       - name: Build and inspect package
-        uses: hynek/build-and-inspect-python-package@v2
+        uses: hynek/build-and-inspect-python-package@2abe76da66d0a6a4a227101f9348ee855797cfa5  # v3.0.1
 
   release-test-pypi:
     name: Publish in-dev package to test.pypi.org