diff --git a/.github/workflows/ts.yaml b/.github/workflows/ts.yaml
index 4d1b871e..9751a918 100644
--- a/.github/workflows/ts.yaml
+++ b/.github/workflows/ts.yaml
@@ -36,7 +36,7 @@ jobs:
       - run: pnpm build
 
       - if: github.event_name == 'pull_request'
-        uses: actions/github-script@v7
+        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
         with:
           script: |
             github.rest.issues.createComment({
@@ -49,7 +49,7 @@ jobs:
         uses: ./
 
       - if: github.event_name == 'pull_request'
-        uses: actions/github-script@v7
+        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
         with:
           script: |
             github.rest.issues.createComment({
@@ -59,7 +59,7 @@ jobs:
               body: `👋 e2e-test\n<!-- tail -->`
             })
       - if: github.event_name == 'pull_request'
-        uses: actions/github-script@v7
+        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
         with:
           script: |
             github.rest.issues.createComment({
@@ -77,7 +77,7 @@ jobs:
             <!-- head -->
 
       - if: github.event_name == 'pull_request'
-        uses: actions/github-script@v6
+        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
         with:
           script: |
             github.rest.issues.createComment({