diff --git a/.github/workflows/automerge.yaml b/.github/workflows/automerge.yaml
index d16ba10c7..52792f92f 100644
--- a/.github/workflows/automerge.yaml
+++ b/.github/workflows/automerge.yaml
@@ -13,7 +13,7 @@ jobs:
       group: default
     steps:
       - name: Approve PR
-        uses: hmarr/auto-approve-action@v3
+        uses: hmarr/auto-approve-action@f0939ea97e9205ef24d872e76833fa908a770363 # v4.0.0
         if: github.actor == 'truecharts-admin'
         with:
           github-token: "${{ secrets.OR_PAT }}"