diff --git a/.github/workflows/claude-code-review.yml b/.github/workflows/claude-code-review.yml
index 0d84e8c96c..7c9857caa1 100644
--- a/.github/workflows/claude-code-review.yml
+++ b/.github/workflows/claude-code-review.yml
@@ -181,7 +181,7 @@ jobs:
         # does not strand us on an old version. When it bumps, re-read the
         # action's release notes for changes to the scrub, MCP wiring, or the
         # `execution_file` contract that the summary step below parses.
-        uses: anthropics/claude-code-action@be7b93b1907a4abad570368f3c74b6fe3807510b # v1 (Claude Code 2.1.220)
+        uses: anthropics/claude-code-action@1623c36729ac1cd5895198cded705a287de7db79 # v1 (Claude Code 2.1.220)
         with:
           # Use the workflow's GITHUB_TOKEN for GitHub API calls instead of the
           # default OIDC -> Claude GitHub App token exchange. That exchange