diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml
index eca70af4..66f2ce87 100644
--- a/.github/workflows/publish.yaml
+++ b/.github/workflows/publish.yaml
@@ -54,7 +54,7 @@ jobs:
           echo "::set-output name=destination_channel::$destination_channel"
 
       - name: Setup lxd
-        uses: canonical/setup-lxd@v0.1.2
+        uses: canonical/setup-lxd@54a5806e490d92e207b57183cf111ed54bbdeff4 # v0.1.2
         with:
           channel: latest/stable