diff --git a/.github/workflows/update-flake.yml b/.github/workflows/update-flake.yml
index ad4016ff4..16dbd7240 100644
--- a/.github/workflows/update-flake.yml
+++ b/.github/workflows/update-flake.yml
@@ -17,7 +17,7 @@ jobs:
 
     steps:
       - uses: actions/checkout@v3
-      - uses: cachix/install-nix-action@v22
+      - uses: cachix/install-nix-action@6a9a9e84a173d90b3ffb42c5ddaf9ea033fad011 # v23
 
       - uses: DeterminateSystems/update-flake-lock@v20
         with: