diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 8b95b0a5..52848135 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -12,7 +12,7 @@ jobs:
     name: lint
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3.1.0
 
       - run: npm ci
 
@@ -26,7 +26,7 @@ jobs:
       matrix:
         helm: ['2.17.0', '3.4.2', '3.7.1']
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3.1.0
 
       - uses: azure/setup-helm@v1
         with:
@@ -46,13 +46,13 @@ jobs:
     steps:
       # workaround for missing secret in fork PRs - see https://github.com/actions/checkout/issues/298
       - if: github.event.pull_request.head.repo.full_name == github.repository
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3.1.0
         with:
           token: ${{ secrets.PAT_TOKEN }}
 
       # in forks, the token is not available so we cannot use it
       - if: github.event.pull_request.head.repo.full_name != github.repository
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3.1.0
 
       - run: git fetch --unshallow --tags