@@ -53,7 +53,7 @@ jobs:
           go-version: ${{ matrix.go-version }}
 
       - name: ⬇️ Setup Task
-        uses: go-task/setup-task@v2
+        uses: go-task/setup-task@a00fbb05ce67b35648be3c78cbc9fd85354c757e # v2.2.0
 
       - name: 🧪 Test
         run: task test --output group --output-group-begin '::group::{{.TASK}}' --output-group-end '::endgroup::'
@@ -75,7 +75,7 @@ jobs:
           go-version: 1.26.x
 
       - name: ⬇️ Setup Task
-        uses: go-task/setup-task@v2
+        uses: go-task/setup-task@a00fbb05ce67b35648be3c78cbc9fd85354c757e # v2.2.0
 
       # zsh and pwsh are preinstalled on the runners; only fish is missing
       # (plus zsh on the Linux image).