diff --git a/.github/workflows/pr.yaml b/.github/workflows/pr.yaml
index 041f765..2a22c96 100644
--- a/.github/workflows/pr.yaml
+++ b/.github/workflows/pr.yaml
@@ -14,7 +14,7 @@ jobs:
   build:
     runs-on: ubuntu-latest-dd
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
       - run: curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y
       - run: . $HOME/.cargo/env && rustup update
       - run: . $HOME/.cargo/env && cargo build --release --all
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index fb389c4..d9db1f3 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -15,7 +15,7 @@ jobs:
   publish:
     runs-on: ubuntu-latest-dd
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
       - run: curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y
       - run: . $HOME/.cargo/env && rustup update
       - run: . $HOME/.cargo/env && cargo install cargo-workspaces