diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 5c0b6bae..b9412ce9 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -126,7 +126,7 @@ jobs:
         run: cargo llvm-cov --lcov --output-path lcov.info --target ${{ matrix.target.triple }}
 
       - name: Upload code coverage to Coveralls
-        uses: coverallsapp/github-action@648a8eb78e6d50909eff900e4ec85cab4524a45b # v2.3.6
+        uses: coverallsapp/github-action@5cbfd81b66ca5d10c19b062c04de0199c215fb6e # v2.3.7
         if: github.event_name == 'push'
         continue-on-error: true