diff --git a/.gitea/workflows/ovos-compose-upstream.yml b/.gitea/workflows/ovos-compose-upstream.yml
index a6770df..f79b2e5 100644
--- a/.gitea/workflows/ovos-compose-upstream.yml
+++ b/.gitea/workflows/ovos-compose-upstream.yml
@@ -22,7 +22,7 @@ jobs:
           ./update-sync-ovos-compose.sh
 
       - name: Commit & push changes
-        uses: EndBug/add-and-commit@v9
+        uses: EndBug/add-and-commit@998652d28d7702d095d40f52ae42982a80ae8c7d # v9.0.1
         with:
           add: "compose"
           message: "Update compose/ from ovos-docker:dev"