diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index d02a411..947a9b2 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -15,7 +15,7 @@ on:
 jobs:
   code-scan:
     name: CodeQL Scan
-    uses: entur/gha-security/.github/workflows/code-scan.yml@v2
+    uses: entur/gha-security/.github/workflows/code-scan.yml@v2.15.0
     # no secrets necessary
     permissions:
       packages: read