diff --git a/.github/workflows/reusable-build-bootc.yaml b/.github/workflows/reusable-build-bootc.yaml
index aa96d9a..2038c0e 100644
--- a/.github/workflows/reusable-build-bootc.yaml
+++ b/.github/workflows/reusable-build-bootc.yaml
@@ -76,7 +76,7 @@ jobs:
           submodules: true
 
       - name: Install Just
-        uses: extractions/setup-just@v4
+        uses: extractions/setup-just@53165ef7e734c5c07cb06b3c8e7b647c5aa16db3 # v4
 
       - name: Install mkosi
         uses: systemd/mkosi@c4c3d793d0f6f0a2f26895de5ed9382396f36bb5