diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index e2987c0a..20922cc4 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -9,7 +9,7 @@ permissions: {}
 
 jobs:
   test:
-    uses: nodenv/.github/.github/workflows/test.yml@v7.0.8
+    uses: nodenv/.github/.github/workflows/test.yml@bd27009d5f178c0a88d42f7b07e6a3c7623ed768 # v7.0.8
     with: { superlinter: false } # TODO renable superlinter
     permissions:
       contents: read