diff --git a/.gitea/workflows/signing.yaml b/.gitea/workflows/signing.yaml
index f59e8d1..440bd2d 100644
--- a/.gitea/workflows/signing.yaml
+++ b/.gitea/workflows/signing.yaml
@@ -13,7 +13,7 @@ jobs:
         run: ls -la
       - name: Sign
         id: sign
-        uses: https://git.lerch.org/lobo/action-hsm-sign@8bf352b
+        uses: https://git.lerch.org/lobo/action-hsm-sign@8bf352b9659f6e3c075568c80bd5c31f07f06b2c
         with:
           pin: ${{ secrets.HSM_USER_PIN }}
           files: ???