diff --git a/.github/workflows/build-and-publish-dev.yaml b/.github/workflows/build-and-publish-dev.yaml
index ea7a46d..67d8452 100644
--- a/.github/workflows/build-and-publish-dev.yaml
+++ b/.github/workflows/build-and-publish-dev.yaml
@@ -19,7 +19,7 @@ jobs:
       BEETS_VERSION: "2.11.0"
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
 
       - name: Build
         id: build
diff --git a/.github/workflows/build-and-test-pr.yaml b/.github/workflows/build-and-test-pr.yaml
index eba80c1..1c32917 100644
--- a/.github/workflows/build-and-test-pr.yaml
+++ b/.github/workflows/build-and-test-pr.yaml
@@ -13,7 +13,7 @@ jobs:
       BEETS_VERSION: "2.11.0"
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
 
       - name: Build
         id: build