diff --git a/.github/workflows/publish-ruby.yml b/.github/workflows/publish-ruby.yml
index 0081dbea0..498e62812 100644
--- a/.github/workflows/publish-ruby.yml
+++ b/.github/workflows/publish-ruby.yml
@@ -120,7 +120,7 @@ jobs:
           git remote set-url origin "https://x-access-token:${{ github.token }}@github.com/$GITHUB_REPOSITORY"
 
       - name: Configure trusted publishing credentials
-        uses: rubygems/configure-rubygems-credentials@v1.0.0
+        uses: rubygems/configure-rubygems-credentials@bc6dd217f8a4f919d6835fcfefd470ef821f5c44 # v1.0.0
 
       - name: Run release rake task
         if: ${{ inputs.release_type == 'Release' }}