diff --git a/.github/workflows/build-and-test.yml b/.github/workflows/build-and-test.yml
index 5fde5674a..70ec3f217 100644
--- a/.github/workflows/build-and-test.yml
+++ b/.github/workflows/build-and-test.yml
@@ -43,7 +43,7 @@ jobs:
         os: [ubuntu-24.04, ubuntu-24.04-arm, windows-2022, macos-15]        
         python: ["cp313t", "cp312", "cp311", "cp310"] # because of abi3 we don't need to build separate whls for python 3.13, 3.14
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v6.0.2
       with:
         submodules: recursive
     - name: Build wheels
diff --git a/.github/workflows/cxx.yml b/.github/workflows/cxx.yml
index db6c05cf8..fc34d980a 100644
--- a/.github/workflows/cxx.yml
+++ b/.github/workflows/cxx.yml
@@ -15,7 +15,7 @@ jobs:
   cxx:
     runs-on: ubuntu-24.04
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v6.0.2
       with:
         submodules: recursive
         persist-credentials: false
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index 9b8bdebfa..186532c0a 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -19,5 +19,5 @@ jobs:
     name: Ruff
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.2
       - uses: astral-sh/ruff-action@0ce1b0bf8b818ef400413f810f8a11cdbda0034b # v4.0.0
diff --git a/.github/workflows/reuse.yml b/.github/workflows/reuse.yml
index c0c6ab6a4..d11d6cfa8 100644
--- a/.github/workflows/reuse.yml
+++ b/.github/workflows/reuse.yml
@@ -13,7 +13,7 @@ jobs:
   test:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@0c366fd6a839edf440554fa01a7085ccba70ac98 # v5.0.1
+    - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v5.0.1
       with:
         persist-credentials: false
     - name: REUSE Compliance Check