diff --git a/.github/workflows/nightly.yml b/.github/workflows/nightly.yml
index b5177b63bf..fead08f15f 100644
--- a/.github/workflows/nightly.yml
+++ b/.github/workflows/nightly.yml
@@ -158,7 +158,7 @@ jobs:
           apt install zip
           zip checkov.zip dist/checkov
       - name: Upload Release Asset
-        uses: actions/upload-release-asset@v1
+        uses: actions/upload-release-asset@e8f9f06c4b078e705bd2ea027f0926603fc9b4d5 # v1
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         with: