diff --git a/.github/workflows/label-discussions.yml b/.github/workflows/label-discussions.yml
index d34a97ff1740..a76bdfe0c403 100644
--- a/.github/workflows/label-discussions.yml
+++ b/.github/workflows/label-discussions.yml
@@ -20,7 +20,7 @@ jobs:
           (github.event.discussion.category.name == 'General' ||
            github.event.discussion.category.name == 'Ideas' ||
            github.event.discussion.category.name == 'Q&A')
-        uses: octokit/graphql-action@v2.x
+        uses: octokit/graphql-action@ddde8ebb2493e79f390e6449c725c21663a67505 # v3.0.2
         with:
           query: |
             mutation($labelableId: ID!) {
@@ -48,7 +48,7 @@ jobs:
            contains(github.event.discussion.body, 'Python') ||
            contains(github.event.discussion.title, 'python') ||
            contains(github.event.discussion.title, 'Python'))
-        uses: octokit/graphql-action@v2.x
+        uses: octokit/graphql-action@ddde8ebb2493e79f390e6449c725c21663a67505 # v3.0.2
         with:
           query: |
             mutation($labelableId: ID!) {
@@ -88,7 +88,7 @@ jobs:
            contains(github.event.discussion.body, 'CSharp') ||
            contains(github.event.discussion.title, 'csharp') ||
            contains(github.event.discussion.title, 'CSharp'))
-        uses: octokit/graphql-action@v2.x
+        uses: octokit/graphql-action@ddde8ebb2493e79f390e6449c725c21663a67505 # v3.0.2
         with:
           query: |
             mutation($labelableId: ID!) {