diff --git a/README.md b/README.md
index 59345d3a..908204eb 100644
--- a/README.md
+++ b/README.md
@@ -149,7 +149,7 @@ jobs:
           persist-credentials: false
 
       - name: "Run analysis"
-        uses: ossf/scorecard-action@0fe1afdc40f536c78e3dc69147b91b3ecec2cc8a
+        uses: ossf/scorecard-action@f5a7da46837397de5331ea22ce0099e2bfe265d0 # v1.0.1
         with:
           results_file: results.sarif
           results_format: sarif