diff --git a/.github/workflows/supply-chain.yml b/.github/workflows/supply-chain.yml
index 60601fa3..e5d4a45f 100644
--- a/.github/workflows/supply-chain.yml
+++ b/.github/workflows/supply-chain.yml
@@ -35,7 +35,7 @@ jobs:
         run: node scripts/check-npm-package.js
 
       - name: Cargo dependency policy
-        uses: EmbarkStudios/cargo-deny-action@6c8f9facfa5047ec02d8485b6bf52b587b7777d1 # v2.0.18
+        uses: EmbarkStudios/cargo-deny-action@a531616d8ce3b9177443e48a1159bc945a099823 # v2.0.19
         with:
           command: check
           arguments: --locked