diff --git a/.github/workflows/go-test.yaml b/.github/workflows/go-test.yaml
index d5e7fabb1..e81e2f643 100644
--- a/.github/workflows/go-test.yaml
+++ b/.github/workflows/go-test.yaml
@@ -34,7 +34,7 @@ jobs:
         # Skip on PRs from forks: GitHub does not grant id-token: write to
         # cross-repository workflow runs, so the OIDC upload cannot authenticate.
         if: github.event_name == 'push' || github.event.pull_request.head.repo.full_name == github.repository
-        uses: qltysh/qlty-action/coverage@fd52dc852530a708d68c3b7342f8d33d1df4cd55 # v2.2.1
+        uses: qltysh/qlty-action/coverage@dafbc1e328f1f92525f1a3916724bd5fa01498e8 # v2.2.3
         with:
           oidc: true
           files: c.out