diff --git a/.github/workflows/gotest.yml b/.github/workflows/gotest.yml
index 7862486..4f1e58f 100644
--- a/.github/workflows/gotest.yml
+++ b/.github/workflows/gotest.yml
@@ -15,7 +15,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 5
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v4.2.2
       - uses: actions/setup-go@v2
         with:
           go-version: 1.23.0
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 6d366e9..df7b7c0 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -16,7 +16,7 @@ jobs:
   goreleaser:
     runs-on: ubuntu-latest-8-cores
     steps:
-      - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0
+      - uses: actions/checkout@cbb722410c2e876e24abbe8de2cc27693e501dcb # v2.7.0
         with:
           # Allow goreleaser to access older tag information.
           fetch-depth: 0