diff --git a/.github/workflows/scheduled-go-security-scan.yml b/.github/workflows/scheduled-go-security-scan.yml
index d1ecc2184ac..ee9fe35bcb7 100644
--- a/.github/workflows/scheduled-go-security-scan.yml
+++ b/.github/workflows/scheduled-go-security-scan.yml
@@ -17,7 +17,7 @@ jobs:
         uses: actions/checkout@v3
 
       - name: Run Gosec Security Scanner
-        uses: securego/gosec@master
+        uses: securego/gosec@v2.20.0
         with:
           args: '-no-fail -fmt=sarif -out=go-security-scan-results.sarif -exclude-dir=pkg/client -exclude-dir=pkg/clientv1alpha1 ./...'