diff --git a/.github/workflows/update-consumers.yml b/.github/workflows/update-consumers.yml
index cecd4ee..21c96a9 100644
--- a/.github/workflows/update-consumers.yml
+++ b/.github/workflows/update-consumers.yml
@@ -101,7 +101,7 @@ jobs:
           # for very recently created repos, but this is fine for release automation.
           echo "Searching for consumer repos..."
           REPOS=$(gh api --method GET --paginate '/search/code?per_page=100' \
-            -f q='org:docker "docker/docker-agent-action/.github/workflows/review-pr.yml@" language:YAML path:.github/workflows' \
+            -f q='org:docker "docker/docker-agent-action/.github/workflows/review-pr.yml@baf90543d81f5de59751dfd10e6cf45e21a5a982 # v2.0.3
             --jq '[.items[] | {repo: .repository.full_name, path: .path}] | unique_by(.repo) | .[] | "\(.repo) \(.path)"')
 
           if [ -z "$REPOS" ]; then