diff --git a/.github/workflows/provable.yml b/.github/workflows/provable.yml
index 1e203b4..f34d8f3 100644
--- a/.github/workflows/provable.yml
+++ b/.github/workflows/provable.yml
@@ -46,7 +46,7 @@ jobs:
     timeout-minutes: 15
     steps:
       - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
-      - uses: mlugg/setup-zig@v1 # SHA-pin pending (advisory Hypatia medium)
+      - uses: mlugg/setup-zig@53fc45b17fe98b52f92ee5ea08ff48a85a3e7eb7 # v1.2.2
         with:
           version: 0.14.0
       - name: zig build + test