diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 7b73209c..d4e84e91 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -55,7 +55,7 @@ jobs:
               sha: toolsCommitTag.data.sha,
             });
   release:
-    uses: bazel-contrib/.github/.github/workflows/release_ruleset.yaml@v7.6.0
+    uses: bazel-contrib/.github/.github/workflows/release_ruleset.yaml@1d798ff015ed0696433e01e2c3ccbb2abefadad7 # v7.7.0
     needs: create-release-tag
     with:
       release_files: protovalidate-*.tar.gz