diff --git a/README.md b/README.md
index 71465c4..84e84b4 100644
--- a/README.md
+++ b/README.md
@@ -21,7 +21,7 @@ jobs:
     steps:
       - name: GitHub Action step
         id: step1
-        uses: scientific-python/circleci-artifacts-redirector-action@v1
+        uses: scientific-python/circleci-artifacts-redirector-action@v1  # or use hash for better security
         with:
           repo-token: ${{ secrets.GITHUB_TOKEN }}
           api-token: ${{ secrets.CIRCLECI_TOKEN }}