diff --git a/.github/workflows/release-integration.yml b/.github/workflows/release-integration.yml
index c2ede0bb..4cd5fd54 100644
--- a/.github/workflows/release-integration.yml
+++ b/.github/workflows/release-integration.yml
@@ -100,7 +100,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Notify failure via Slack
-        uses: archive/github-actions-slack@v2
+        uses: archive/github-actions-slack@d9dae40827adf93bddf939db6552d1e392259d7d
         with:
           slack-bot-user-oauth-access-token: ${{ secrets.K8S_AGENTS_SLACK_TOKEN }}
           slack-channel: ${{ secrets.K8S_AGENTS_SLACK_CHANNEL }}
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 85d28d1c..02eb1486 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,6 +7,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## Unreleased
 
+### security
+- Meet internal security standards @jjaramillo [#334](https://github.com/newrelic/k8s-metadata-injection/pull/334)
+
 ## 1.11.0
 ## What's Changed
 - Add configuration of certmanager durations @cdobbyn [#323](https://github.com/newrelic/k8s-metadata-injection/pull/323)