diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml
index 33ab0f75..2fd912f9 100644
--- a/.github/workflows/publish.yaml
+++ b/.github/workflows/publish.yaml
@@ -51,7 +51,7 @@ jobs:
           echo "::set-output name=destination_channel::$destination_channel"
 
       - name: Setup lxd
-        uses: canonical/setup-lxd@v0.1.2
+        uses: canonical/setup-lxd@54a5806e490d92e207b57183cf111ed54bbdeff4 # v0.1.2
         with:
           channel: latest/stable