diff --git a/.github/workflows/actionlint.yml b/.github/workflows/actionlint.yml
index c6c75d1..4d92401 100644
--- a/.github/workflows/actionlint.yml
+++ b/.github/workflows/actionlint.yml
@@ -18,7 +18,7 @@ jobs:
   actionlint:
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.2
 
       - name: Download actionlint
         env:
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 953db1b..e0b749a 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -54,7 +54,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v6.0.2
         with:
           fetch-depth: 0
 
@@ -139,7 +139,7 @@ jobs:
         shell: bash
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.2
 
       - name: Shipped example config matches repo root
         run: cmp -s configs/v4/.pre-commit-config.yaml .pre-commit-config.yaml
diff --git a/.github/workflows/pre-commit.yml b/.github/workflows/pre-commit.yml
index eb32bd7..bd0760d 100644
--- a/.github/workflows/pre-commit.yml
+++ b/.github/workflows/pre-commit.yml
@@ -17,7 +17,7 @@ jobs:
   pre-commit:
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.2
 
       - name: Shipped example config matches repo root
         run: cmp -s configs/v4/.pre-commit-config.yaml .pre-commit-config.yaml