diff --git a/.github/workflows/build-java-17.yml b/.github/workflows/build-java-17.yml
index ad48c58..9c600cd 100644
--- a/.github/workflows/build-java-17.yml
+++ b/.github/workflows/build-java-17.yml
@@ -31,7 +31,7 @@ jobs:
     - name: Build with Maven
       run: mvn package -ntp
     - name: Upload coverage reports to Codecov
-      uses: codecov/codecov-action@v6.0.0
+      uses: codecov/codecov-action@e79a6962e0d4c0c17b229090214935d2e33f8354 # v6.0.1
       with:
         token: ${{ secrets.CODECOV_TOKEN }}
         slug: ${{ github.repository }}