diff --git a/.github/workflows/codecov.yml b/.github/workflows/codecov.yml
index f4fd0c28f..258262345 100644
--- a/.github/workflows/codecov.yml
+++ b/.github/workflows/codecov.yml
@@ -8,7 +8,7 @@ jobs:
   codecov:
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
       - uses: actions/setup-java@v3
         with:
           distribution: 'temurin'
diff --git a/.github/workflows/mvn.yml b/.github/workflows/mvn.yml
index 5c61e1f85..4d48e3aad 100644
--- a/.github/workflows/mvn.yml
+++ b/.github/workflows/mvn.yml
@@ -15,7 +15,7 @@ jobs:
         os: [ubuntu-20.04, windows-2022, macos-12]
         java: [11, 17]
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
       - uses: actions/setup-java@v3
         with:
           distribution: 'temurin'
diff --git a/.github/workflows/pdd.yml b/.github/workflows/pdd.yml
index 26c072dfc..3d8487d0e 100644
--- a/.github/workflows/pdd.yml
+++ b/.github/workflows/pdd.yml
@@ -11,5 +11,5 @@ jobs:
   pdd:
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
       - uses: g4s8/pdd-action@master
diff --git a/.github/workflows/sonar.yml b/.github/workflows/sonar.yml
index 1c04380e0..6abbc267c 100644
--- a/.github/workflows/sonar.yml
+++ b/.github/workflows/sonar.yml
@@ -8,7 +8,7 @@ jobs:
   sonar:
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
       - uses: actions/setup-java@v3
         with:
           java-version: 11
diff --git a/.github/workflows/up.yml b/.github/workflows/up.yml
index 9a804fa6c..3f4d716a9 100644
--- a/.github/workflows/up.yml
+++ b/.github/workflows/up.yml
@@ -6,7 +6,7 @@ jobs:
   up:
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
       - run: |-
           git fetch --tags --force && \
           latest=$(git tag --sort=creatordate | tail -1) && \
diff --git a/.github/workflows/xcop.yml b/.github/workflows/xcop.yml
index 9ff884023..eacf34113 100644
--- a/.github/workflows/xcop.yml
+++ b/.github/workflows/xcop.yml
@@ -11,5 +11,5 @@ jobs:
   xcop:
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
       - uses: g4s8/xcop-action@master