diff --git a/.github/workflows/release-main.yaml b/.github/workflows/release-main.yaml
index a67104f..5a9fa86 100644
--- a/.github/workflows/release-main.yaml
+++ b/.github/workflows/release-main.yaml
@@ -8,7 +8,7 @@ jobs:
   build-and-push-main:
     runs-on: ubuntu-latest 
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
       - uses: acorn-io/actions-setup@v2
         with:
           acorn-version: main
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 167ac64..7c6cc1a 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -9,7 +9,7 @@ jobs:
   push:
     runs-on: ubuntu-latest 
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
       - uses: acorn-io/actions-setup@v2
       - uses: acorn-io/actions-login@v1
         with:
diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml
index 6ea5336..16edf43 100644
--- a/.github/workflows/test.yaml
+++ b/.github/workflows/test.yaml
@@ -9,7 +9,7 @@ jobs:
   test:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
         with:
           fetch-depth: 0
       - uses: actions/setup-go@v4