diff --git a/.github/workflows/cross-ci.yml b/.github/workflows/cross-ci.yml
index c57775f5f..8885596bf 100644
--- a/.github/workflows/cross-ci.yml
+++ b/.github/workflows/cross-ci.yml
@@ -80,7 +80,7 @@ jobs:
         with:
           fetch-depth: 0 # fetch all history so that git describe works
       - name: Set up Rust
-        uses: actions-rs/toolchain@v1
+        uses: actions-rs/toolchain@16499b5e05bf2e26879000db0c1d13f7e13fa3af # v1
         with:
           toolchain: ${{ matrix.rust }}
           override: true