diff --git a/action.yml b/action.yml
index b408e8f..6fa9a0a 100644
--- a/action.yml
+++ b/action.yml
@@ -97,7 +97,7 @@ runs:
 
     - name: Install Bun
       if: inputs.path_to_bun_executable == ''
-      uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # https://github.com/oven-sh/setup-bun/releases/tag/v2.2.0
+      uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2.2.0 — https://github.com/oven-sh/setup-bun/releases/tag/v2.2.0 (sha-pinned)
       with:
         bun-version: 1.3.6