diff --git a/.github/workflows/security-supply-chain.yml b/.github/workflows/security-supply-chain.yml
index 8fb7fac4633f..7ce7de5d2f57 100644
--- a/.github/workflows/security-supply-chain.yml
+++ b/.github/workflows/security-supply-chain.yml
@@ -110,6 +110,7 @@ jobs:
             - 'semver@6.3.1'
             - 'webpack-dev-middleware@7.4.6'
             - 'undici-types@6.21.0'
+            - 'encodeurl@2.0.2' # TODO remove once https://github.com/pillarjs/encodeurl/issues/43 is closed
           YAML
 
           sfw pnpm install || sfw pnpm install || sfw pnpm install