diff --git a/.github/workflows/merge.yml b/.github/workflows/merge.yml
index 6c9a5aa..7cadd9a 100644
--- a/.github/workflows/merge.yml
+++ b/.github/workflows/merge.yml
@@ -16,7 +16,7 @@ jobs:
       ANSIBLE_VAULT_PASSWORD_FILE: .vault.txt
 
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
     - name: Set Ansible Vault password file
       run: |
diff --git a/.github/workflows/pr.yml b/.github/workflows/pr.yml
index b666742..20373fa 100644
--- a/.github/workflows/pr.yml
+++ b/.github/workflows/pr.yml
@@ -15,7 +15,7 @@ jobs:
       ANSIBLE_VAULT_PASSWORD_FILE: .vault.txt
 
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
     - name: Set Ansible Vault password file
       run: |