diff --git a/.github/workflows/binaries.yml b/.github/workflows/binaries.yml
index 6111cd4..2d2f7a9 100644
--- a/.github/workflows/binaries.yml
+++ b/.github/workflows/binaries.yml
@@ -13,7 +13,7 @@ jobs:
     steps:
       - name: Checkout source
         id: source
-        uses: actions/checkout@v3
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
 
       - name: Setup golang
         id: golang
diff --git a/.github/workflows/changes.yml b/.github/workflows/changes.yml
index ef174c5..54e6b3c 100644
--- a/.github/workflows/changes.yml
+++ b/.github/workflows/changes.yml
@@ -13,7 +13,7 @@ jobs:
     steps:
       - name: Checkout source
         id: source
-        uses: actions/checkout@v3
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
         with:
           token: ${{ secrets.BOT_ACCESS_TOKEN }}
 
@@ -44,7 +44,7 @@ jobs:
     steps:
       - name: Checkout source
         id: source
-        uses: actions/checkout@v3
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
         with:
           token: ${{ secrets.BOT_ACCESS_TOKEN }}
 
@@ -75,7 +75,7 @@ jobs:
     steps:
       - name: Checkout source
         id: source
-        uses: actions/checkout@v3
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
         with:
           token: ${{ secrets.BOT_ACCESS_TOKEN }}
 
diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml
index c366312..54da546 100644
--- a/.github/workflows/docker.yml
+++ b/.github/workflows/docker.yml
@@ -32,7 +32,7 @@ jobs:
     steps:
       - name: Checkout source
         id: source
-        uses: actions/checkout@v3
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
 
       - name: Setup golang
         id: golang
@@ -132,7 +132,7 @@ jobs:
     steps:
       - name: Checkout source
         id: source
-        uses: actions/checkout@v3
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
 
       - name: Hub tags
         id: hubTags
@@ -210,7 +210,7 @@ jobs:
     steps:
       - name: Checkout source
         id: source
-        uses: actions/checkout@v3
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
 
       - name: Hub readme
         id: hub
diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
index 229a52a..1beb21f 100644
--- a/.github/workflows/docs.yml
+++ b/.github/workflows/docs.yml
@@ -13,7 +13,7 @@ jobs:
     steps:
       - name: Checkout source
         id: source
-        uses: actions/checkout@v3
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
 
       - name: Setup hugo
         id: hugo
diff --git a/.github/workflows/general.yml b/.github/workflows/general.yml
index ae7c78b..e64433b 100644
--- a/.github/workflows/general.yml
+++ b/.github/workflows/general.yml
@@ -16,7 +16,7 @@ jobs:
     steps:
       - name: Checkout source
         id: source
-        uses: actions/checkout@v3
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
 
       - name: Setup golang
         id: golang
diff --git a/.github/workflows/kustomize.yml b/.github/workflows/kustomize.yml
index 309e7ba..fc25169 100644
--- a/.github/workflows/kustomize.yml
+++ b/.github/workflows/kustomize.yml
@@ -16,7 +16,7 @@ jobs:
     steps:
       - name: Checkout source
         id: source
-        uses: actions/checkout@v3
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
         with:
           token: ${{ secrets.BOT_ACCESS_TOKEN }}