diff --git a/action.yml b/action.yml
index b2529c2..2884c9b 100644
--- a/action.yml
+++ b/action.yml
@@ -19,7 +19,7 @@ runs:
   using: "composite"
   steps:
     - name: Checkout toolkit repository
-      uses: actions/checkout@v4
+      uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       with:
         repository: blaxel-ai/toolkit
         path: .bl-toolkit