diff --git a/.github/workflows/rust.yml b/.github/workflows/rust.yml
index cd2ca891..e4244f20 100644
--- a/.github/workflows/rust.yml
+++ b/.github/workflows/rust.yml
@@ -90,7 +90,7 @@ jobs:
           persist-credentials: false
       # Install the same audit version from verified release binaries, avoiding
       # Docker Hub's unauthenticated image-pull limit.
-      - uses: taiki-e/install-action@8cca0918f8471c33515202b73f56ab27f2bed283 # v2
+      - uses: taiki-e/install-action@1e29709c0ec63babbe8f266397a465f29a825f91 # v2
         with:
           tool: cargo-deny@0.20.2
       - run: cargo deny --all-features check advisories licenses bans sources