diff --git a/.github/workflows/cloudrail.yml b/.github/workflows/cloudrail.yml
index e91b48311..5ce8e8db0 100644
--- a/.github/workflows/cloudrail.yml
+++ b/.github/workflows/cloudrail.yml
@@ -36,7 +36,7 @@ jobs:
 
       # For Terraform, Cloudrail requires the plan as input. So we generate it using
       # the Terraform core binary.
-      - uses: hashicorp/setup-terraform@ed3a0531877aca392eb870f440d9ae7aba83a6bd # v1.4.0
+      - uses: hashicorp/setup-terraform@a1502cd9e758c50496cc9ac5308c4843bcd56d36 # v3.0.0
         with:
           terraform_version: v0.13.2