diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 838cafb..ea7323f 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -18,7 +18,7 @@ jobs:
   docker:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           fetch-depth: 0
       - name: Set up Docker Buildx
diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml
index c8d6df2..9d87b73 100644
--- a/.github/workflows/test.yaml
+++ b/.github/workflows/test.yaml
@@ -12,7 +12,7 @@ jobs:
     name: Build and Test
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
     # Docker testing
     - name: Set up Docker Buildx
       uses: docker/setup-buildx-action@v3
@@ -34,7 +34,7 @@ jobs:
         sed -i "s#ghcr.io/usa-reddragon/kiri:__KIRI_VERSION__#ghcr.io/usa-reddragon/kiri-ci:${{ github.sha }}#g" action.yml
     # Action testing
     - name: Clone SnekSafe for testing
-      uses: actions/checkout@v4
+      uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       with:
         repository: USA-RedDragon/SnekSafe
         path: SnekSafe
diff --git a/action.yml b/action.yml
index 079f109..754b437 100644
--- a/action.yml
+++ b/action.yml
@@ -115,7 +115,7 @@ runs:
       path: ${{ steps.kiri-output.outputs.output-dir }}
   - name: Checkout gh-pages branch
     if: github.event_name == 'pull_request'
-    uses: actions/checkout@v4
+    uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
     with:
       ref: gh-pages
       fetch-depth: 0