diff --git a/.github/workflows/trust.yml b/.github/workflows/trust.yml
index d0d89a9..d5eebc5 100644
--- a/.github/workflows/trust.yml
+++ b/.github/workflows/trust.yml
@@ -29,7 +29,7 @@ jobs:
       - name: Install dependencies
         run: bun install --frozen-lockfile
 
-      - uses: CorvidLabs/trust@v1
+      - uses: CorvidLabs/trust@e0272543ad5c88ec75cea1e606cc2efa552af25b # v1.2.0-rc.4
         id: trust
 
       - name: Check managed agent rules