diff --git a/.github/workflows/create-release.yml b/.github/workflows/create-release.yml
index 0e1f88af0..610bbc13f 100644
--- a/.github/workflows/create-release.yml
+++ b/.github/workflows/create-release.yml
@@ -93,7 +93,7 @@ jobs:
             "${{ needs.read-version.outputs.current_version }}"
       -
         name: Create pull request
-        uses: peter-evans/create-pull-request@v7
+        uses: peter-evans/create-pull-request@22a9089034f40e5a961c8808d113e2c98fb63676  # v7
         with:
           token: ${{ secrets.SHOPIFY_GH_ACCESS_TOKEN }}
           branch: release/v${{ needs.read-version.outputs.new_version }}