diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 187e44039c..5cd43df832 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -35,8 +35,12 @@ jobs:
           fetch-depth: 0
 
       - name: Install splitsh
+        env:
+          SPLITSH_VERSION: v1.0.1
+          SPLITSH_SHA256: 2539301ce5e21d0ca44b689d0dd2c1b20d9f9e996c1fe6c462afb8af4e7141cc
         run: |
-          curl -L https://github.com/splitsh/lite/releases/download/v1.0.1/lite_linux_amd64.tar.gz > lite_linux_amd64.tar.gz
+          curl -fsSL "https://github.com/splitsh/lite/releases/download/$SPLITSH_VERSION/lite_linux_amd64.tar.gz" > lite_linux_amd64.tar.gz
+          echo "$SPLITSH_SHA256  lite_linux_amd64.tar.gz" | sha256sum --check --strict
           tar -zxpf lite_linux_amd64.tar.gz
           chmod +x splitsh-lite
           echo "$(pwd)" >> $GITHUB_PATH