diff --git a/dist/index.js b/dist/index.js
index 9d959a9..9946771 100644
--- a/dist/index.js
+++ b/dist/index.js
@@ -1717,6 +1717,7 @@ const path = __importStar(__nccwpck_require__(1017));
 const workflowContextHelper = __importStar(__nccwpck_require__(9568));
 function getInputs() {
     return __awaiter(this, void 0, void 0, function* () {
+        var _a;
         const result = {};
         // GitHub workspace
         let githubWorkspacePath = process.env['GITHUB_WORKSPACE'];
@@ -1748,7 +1749,11 @@ function getInputs() {
         const isWorkflowRepository = qualifiedRepository.toUpperCase() ===
             `${github.context.repo.owner}/${github.context.repo.repo}`.toUpperCase();
         // Source branch, source version
-        result.ref = core.getInput('ref');
+        result.commit = core.getInput('commit');
+        if (result.commit && !result.commit.match(/^[0-9a-fA-F]{40}$/)) {
+            throw new Error(`The commit SHA '${result.commit}' is not a valid SHA.`);
+        }
+        result.ref = (_a = core.getInput('ref')) !== null && _a !== void 0 ? _a : result.commit;
         if (!result.ref) {
             if (isWorkflowRepository) {
                 result.ref = github.context.ref;