diff --git a/.github/workflows/perf.yml b/.github/workflows/perf.yml
index 0682f3fad..b75c5ba8e 100644
--- a/.github/workflows/perf.yml
+++ b/.github/workflows/perf.yml
@@ -49,7 +49,7 @@ jobs:
       # identity federation. This allows us to request short lived credentials on demand, rather than storing
       # credentials in secrets long term. More information can be found at:
       # https://docs.github.com/en/actions/security-for-github-actions/security-hardening-your-deployments/configuring-openid-connect-in-google-cloud-platform
-      - uses: 'google-github-actions/auth@v2'
+      - uses: 'google-github-actions/auth@b7593ed2efd1c1617e1b0254da33b86225adb2a5' #v2.1.12
         with:
           project_id: 'internal-200822'
           workload_identity_provider: 'projects/823469418460/locations/global/workloadIdentityPools/measurables-tracking/providers/angular'