diff --git a/.github/workflows/check.yml b/.github/workflows/check.yml
index 6f98e34..a433c06 100644
--- a/.github/workflows/check.yml
+++ b/.github/workflows/check.yml
@@ -20,7 +20,7 @@ jobs:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - name: Rust toolchain from rust-toolchain.toml
         run: rustup toolchain install
-      - uses: taiki-e/install-action@183e4297cca2404691e9380e1307288dced5c82a # v2
+      - uses: taiki-e/install-action@1168f6810a3cb30a3514bf5756a3b7f0422c6df8 # v2
         with:
           # shellcheck and cargo-fuzz pinned: their verdicts change between releases, and the
           # gate must judge the same way here and on a workstation. The fuzz targets' dated