diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 6990da2..54e9999 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -19,7 +19,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v6.0.3
 
       - name: Setup Rust
         uses: dtolnay/rust-toolchain@stable
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 65c6888..7d07e14 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -26,7 +26,7 @@ jobs:
       tag: ${{ steps.meta.outputs.tag }}
       ref: ${{ steps.meta.outputs.ref }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.3
         with:
           ref: ${{ inputs.ref }}
           persist-credentials: false
@@ -100,7 +100,7 @@ jobs:
           APP_ID: ${{ vars.APP_ID }}
           APP_SLUG: ${{ steps.app-token.outputs.app-slug }}
 
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.3
         with:
           token: ${{ steps.app-token.outputs.token }}
           persist-credentials: false