diff --git a/.github/workflows/claude-code-review.yml b/.github/workflows/claude-code-review.yml
index 922608c..9b2934b 100644
--- a/.github/workflows/claude-code-review.yml
+++ b/.github/workflows/claude-code-review.yml
@@ -10,5 +10,5 @@ jobs:
     if: |
       github.event.pull_request.head.repo.full_name == github.repository
     # Job body always comes from main so edits to these workflows on a PR cannot break the check.
-    uses: boneskull/gh-stack/.github/workflows/claude-code-review-reusable.yml@main
+    uses: boneskull/gh-stack/.github/workflows/claude-code-review-reusable.yml@1aa24a5ca8eaddc47822b2d799e772255dcf2c6b # main
     secrets: inherit