diff --git a/.github/workflows/code-quality.yaml b/.github/workflows/code-quality.yaml
index f128108..0366fd4 100644
--- a/.github/workflows/code-quality.yaml
+++ b/.github/workflows/code-quality.yaml
@@ -10,7 +10,7 @@ jobs:
   gofmt:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
     - name: gofmt
       run: |
         changes=$(find . -name "*.go" | xargs gofmt -s -l 2>&1)
@@ -18,6 +18,6 @@ jobs:
   vet:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
     - name: vet
       run: go vet ./...
diff --git a/.github/workflows/testing.yaml b/.github/workflows/testing.yaml
index f748c4f..dfba687 100644
--- a/.github/workflows/testing.yaml
+++ b/.github/workflows/testing.yaml
@@ -10,7 +10,7 @@ jobs:
   tests:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
 
       - name: compose build
         run: docker compose build