diff --git a/.github/workflows/pr-validation.yml b/.github/workflows/pr-validation.yml
index 93adbd4ae4a..a0baf7dbb0a 100644
--- a/.github/workflows/pr-validation.yml
+++ b/.github/workflows/pr-validation.yml
@@ -22,7 +22,7 @@ jobs:
         php-versions: ['8.2', '8.3', '8.4', '8.5']
     steps:
     - name: Setup PHP
-      uses: shivammathur/setup-php@v2
+      uses: shivammathur/setup-php@f3e473d116dcccaddc5834248c87452386958240 # 2.37.2
       with:
         php-version: ${{ matrix.php-versions }}
     - uses: actions/checkout@v7