diff --git a/.github/workflows/gdi.yml b/.github/workflows/gdi.yml
index ccebc4f..b322ffc 100644
--- a/.github/workflows/gdi.yml
+++ b/.github/workflows/gdi.yml
@@ -27,8 +27,9 @@ jobs:
         with:
           egress-policy: audit
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
-      - uses: dtolnay/rust-toolchain@stable
+      - uses: step-security/dtolnay-rust-toolchain@8dd607977d06adf4ed49b190381e74c17a9dd25f # v1.0.0
         with:
+          toolchain: stable
           components: rustfmt, clippy
           targets: wasm32-unknown-unknown
       - run: cargo fmt --manifest-path crates/gdi/Cargo.toml --check