diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index e349d62c..f9c825b9 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -43,7 +43,8 @@ jobs:
           path: '**/target/test-reports/TEST-*.xml'
           reporter: java-junit
       - name: Upload dependency graph
-        uses: scalacenter/sbt-dependency-submission
+        if: needs.checksecret.outputs.HAVE_SECRETS == 'true'
+        uses: scalacenter/sbt-dependency-submission@d3f139371479f7d3ca3db160b9b536cb4f9dcdd5
   publish-artifacts:
     runs-on: ubuntu-latest
     needs: [ 'build', 'checksecret' ]