diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index 76d77236ecb..7a72eb65698 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -29,4 +29,9 @@ jobs:
         with:
           go-version: ${{ env.GO_VERSION }}
 
-      - uses: pre-commit/action@2c7b3805fd2a0fd8c1884dcaebf91fc102a13ecd # v3.0.1
+      # Replaces pre-commit/action, whose internal actions/cache reference is
+      # not SHA-pinned and violates the org actions policy.
+      - name: Run pre-commit
+        run: |
+          python -m pip install pre-commit
+          pre-commit run --show-diff-on-failure --color=always --all-files