diff --git a/.github/workflows/node.yml b/.github/workflows/node.yml
index bd295f1..efb8cd6 100644
--- a/.github/workflows/node.yml
+++ b/.github/workflows/node.yml
@@ -17,7 +17,7 @@ jobs:
     steps:
     - uses: actions/checkout@v7
     - name: Verify npm all runs and build output matches
-      uses: actions/setup-node@v6
+      uses: actions/setup-node@249970729cb0ef3589644e2896645e5dc5ba9c38 # v6.5.0
       with:
         node-version: '24'
     - run: npm ci