diff --git a/.github/workflows/reusable-test.yml b/.github/workflows/reusable-test.yml
index 794a5cfe..1c312652 100644
--- a/.github/workflows/reusable-test.yml
+++ b/.github/workflows/reusable-test.yml
@@ -126,7 +126,7 @@ jobs:
       - name: Merge coverage reports
         run: pnpm run coverage:report:all
       - name: Upload to Codecov
-        uses: codecov/codecov-action@v4.0.1
+        uses: codecov/codecov-action@e28ff129e5465c2c0dcc6f003fc735cb6ae0c673 # v4.5.0
         with:
           directory: ${{ env.COVERAGE_DIR }}
           token: ${{ secrets.codecov-token }}