diff --git a/.github/workflows/cve-scan.yaml b/.github/workflows/cve-scan.yaml
index 16f067243031..70b9eacfc0ed 100644
--- a/.github/workflows/cve-scan.yaml
+++ b/.github/workflows/cve-scan.yaml
@@ -92,7 +92,7 @@ jobs:
           exit-code: 42
           failure-threshold: high
       - name: Hadolint
-        uses: hadolint/hadolint-action@v3
+        uses: hadolint/hadolint-action@v3.1.0
         id: hadolint
         if: ${{ always() }}
         with: