diff --git a/.github/workflows/test-and-release.yaml b/.github/workflows/test-and-release.yaml
index 84529897..f0037750 100644
--- a/.github/workflows/test-and-release.yaml
+++ b/.github/workflows/test-and-release.yaml
@@ -40,7 +40,7 @@ jobs:
         run: npm run prepublishOnly
 
       - name: Configure AWS credentials
-        uses: aws-actions/configure-aws-credentials@v5
+        uses: aws-actions/configure-aws-credentials@ec61189d14ec14c8efccab744f656cffd0e33f37 # v6.1.0
         with:
           # The role is set up via https://github.com/bifravst/ci
           # secrets.AWS_ACCOUNT_ID_CI is an organization secret