diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 3626782..6527e27 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -51,7 +51,7 @@ jobs:
 
       - name: Authenticate to crates.io (Trusted Publishing)
         id: auth
-        uses: rust-lang/crates-io-auth-action@bbd81622f20ce9e2dd9622e3218b975523e45bbe # v1
+        uses: rust-lang/crates-io-auth-action@c6f97d42243bad5fab37ca0427f495c86d5b1a18 # v1
 
       # Only the reusable crates/ libraries are published. apps/ (the `cli`
       # package, which produces the `uasset-lens` binary) is publish = false and