diff --git a/.github/workflows/polish-the-code.yml b/.github/workflows/polish-the-code.yml
index 799635b..f0bca81 100644
--- a/.github/workflows/polish-the-code.yml
+++ b/.github/workflows/polish-the-code.yml
@@ -29,7 +29,7 @@ jobs:
     # Limit the running time
     timeout-minutes: 10
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.2
         with:
           # checkout PR HEAD commit
           ref: ${{ github.event.pull_request.head.sha }}
diff --git a/action.yml b/action.yml
index a0f986b..3ee3fe7 100644
--- a/action.yml
+++ b/action.yml
@@ -52,7 +52,7 @@ runs:
       shell: bash
 
     - name: Checkout code
-      uses: actions/checkout@v6
+      uses: actions/checkout@v6.0.2
       with:
         # Fetch latest changes (even by previous job)
         ref: ${{ github.ref }}