diff --git a/.github/workflows/CD_production.yml b/.github/workflows/CD_production.yml
index 3f7c8e20..28442224 100644
--- a/.github/workflows/CD_production.yml
+++ b/.github/workflows/CD_production.yml
@@ -15,7 +15,7 @@ jobs:
 
         steps:
         - name: Check out source repository
-          uses: actions/checkout@v6
+          uses: actions/checkout@v6.0.2
           with:
             fetch-depth: 0
 
diff --git a/.github/workflows/CD_staging.yml b/.github/workflows/CD_staging.yml
index 5d2abf9e..23bd2a6d 100644
--- a/.github/workflows/CD_staging.yml
+++ b/.github/workflows/CD_staging.yml
@@ -15,7 +15,7 @@ jobs:
 
         steps:
         - name: Check out source repository
-          uses: actions/checkout@v6
+          uses: actions/checkout@v6.0.2
           with:
             fetch-depth: 0
 
diff --git a/.github/workflows/format_code.yml b/.github/workflows/format_code.yml
index 94783f64..72311eb6 100644
--- a/.github/workflows/format_code.yml
+++ b/.github/workflows/format_code.yml
@@ -17,7 +17,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check out source repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v6.0.2
       - name: Set up Python environment - 3.12
         uses: actions/setup-python@v6
         with:
@@ -34,7 +34,7 @@ jobs:
       contents: write
       pull-requests: write
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.2
         with:
           ref: ${{ github.head_ref }}
       - uses: psf/black@stable
diff --git a/.github/workflows/jira_codex_pr.yml b/.github/workflows/jira_codex_pr.yml
index 6b69a8c6..84fcc5fa 100644
--- a/.github/workflows/jira_codex_pr.yml
+++ b/.github/workflows/jira_codex_pr.yml
@@ -41,7 +41,7 @@ jobs:
     timeout-minutes: 60
     steps:
       - name: Checkout
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
+        uses: actions/checkout@0c366fd6a839edf440554fa01a7085ccba70ac98 # v4
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 7123afd4..e7ae5275 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -11,7 +11,7 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.2
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index c5b548e8..1cd0e5a8 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -50,7 +50,7 @@ jobs:
 
     steps:
       - name: Check out source repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v6.0.2
 
       - name: Install uv
         uses: astral-sh/setup-uv@v5