diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 1f0b92b..8d26e0b 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -51,7 +51,7 @@ jobs:
 
             - name: Upload coverage report
               if: ${{ matrix.platform.os == 'iOS' }}
-              uses: codecov/codecov-action@ab904c41d6ece82784817410c45d8b8c02684457
+              uses: codecov/codecov-action@e28ff129e5465c2c0dcc6f003fc735cb6ae0c673 # pin@4.5.0
               with:
                 token: ${{ secrets.CODECOV_TOKEN }}