diff --git a/.github/workflows/bandit.yaml b/.github/workflows/bandit.yaml
index 4ae13da..d78d487 100644
--- a/.github/workflows/bandit.yaml
+++ b/.github/workflows/bandit.yaml
@@ -12,7 +12,7 @@ jobs:
   bandit:
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.2
       - uses: actions/setup-python@v6
         with:
           python-version: "3.11"
diff --git a/.github/workflows/pip-audit.yaml b/.github/workflows/pip-audit.yaml
index 4b6b719..07c2c43 100644
--- a/.github/workflows/pip-audit.yaml
+++ b/.github/workflows/pip-audit.yaml
@@ -12,7 +12,7 @@ jobs:
   pip-audit:
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.2
       - uses: actions/setup-python@v6
         with:
           python-version: "3.12"
diff --git a/.github/workflows/pre-commit.yaml b/.github/workflows/pre-commit.yaml
index dd14257..1c0d66e 100644
--- a/.github/workflows/pre-commit.yaml
+++ b/.github/workflows/pre-commit.yaml
@@ -10,7 +10,7 @@ jobs:
   pre-commit:
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.2
       - uses: actions/setup-python@v6
         with:
           python-version: "3.11"
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index 9aab3db..db98f1b 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -25,7 +25,7 @@ jobs:
 
     steps:
       - name: "Checkout code"
-        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v4.2.2
+        uses: actions/checkout@0c366fd6a839edf440554fa01a7085ccba70ac98 # v4.2.2
         with:
           persist-credentials: false
 
diff --git a/.github/workflows/semantic-release.yaml b/.github/workflows/semantic-release.yaml
index 9ccc6a1..fa38fbe 100644
--- a/.github/workflows/semantic-release.yaml
+++ b/.github/workflows/semantic-release.yaml
@@ -22,7 +22,7 @@ jobs:
       contents: write
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v6.0.2
         with:
           token: ${{ secrets.SEMANTIC_RELEASE_TOKEN }}
           ref: ${{ github.ref_name }}
diff --git a/.github/workflows/tests.yaml b/.github/workflows/tests.yaml
index a7ae200..31f8e6e 100644
--- a/.github/workflows/tests.yaml
+++ b/.github/workflows/tests.yaml
@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-22.04
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v6.0.2
       - name: Setup Python
         uses: actions/setup-python@v6
         with: