diff --git a/.github/workflows/coverage.js.yml b/.github/workflows/coverage.js.yml
index 4e1cb5c..e61f7a4 100644
--- a/.github/workflows/coverage.js.yml
+++ b/.github/workflows/coverage.js.yml
@@ -9,7 +9,7 @@ jobs:
         node-version: [20]
     steps:
       - uses: actions/checkout@v4
-      - uses: oven-sh/setup-bun@v1.2.1
+      - uses: oven-sh/setup-bun@4bc047ad259df6fc24a6c9b0f9a0cb08cf17fbe5 # v2.0.1
         with:
           bun-version: latest
       - run: bun install