diff --git a/.github/workflows/build-push.yml b/.github/workflows/build-push.yml
index baaec8e..c129157 100644
--- a/.github/workflows/build-push.yml
+++ b/.github/workflows/build-push.yml
@@ -17,7 +17,7 @@ jobs:
       images: ${{ steps.set-matrix.outputs.images }}
     steps:
       - name: Check out the source code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v6.0.1
 
       - name: Set matrix
         id: set-matrix
@@ -30,7 +30,7 @@ jobs:
       images: ${{ steps.set-matrix.outputs.images }}
     steps:
       - name: Check out the source code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v6.0.1
 
       - name: Set matrix
         id: set-matrix
@@ -49,7 +49,7 @@ jobs:
         image: ${{ fromJson(needs.prepare-base.outputs.images) }}
     steps:
       - name: Check out the repo
-        uses: actions/checkout@v6
+        uses: actions/checkout@v6.0.1
         with:
           fetch-depth: 0
 
@@ -154,7 +154,7 @@ jobs:
       packages: write
     steps:
       - name: Check out the repo
-        uses: actions/checkout@v6
+        uses: actions/checkout@v6.0.1
         with:
           fetch-depth: 0
 
@@ -199,7 +199,7 @@ jobs:
       packages: write
     steps:
       - name: Check out the repo
-        uses: actions/checkout@v6
+        uses: actions/checkout@v6.0.1
         with:
           fetch-depth: 0
 
@@ -252,7 +252,7 @@ jobs:
         image: ${{ fromJson(needs.prepare-others.outputs.images) }}
     steps:
       - name: Check out the repo
-        uses: actions/checkout@v6
+        uses: actions/checkout@v6.0.1
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index eedf8aa..c1ce8bb 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -18,7 +18,7 @@ jobs:
       images: ${{ steps.set-matrix.outputs.images }}
     steps:
       - name: Check out the repo
-        uses: actions/checkout@v6
+        uses: actions/checkout@v6.0.1
 
       - name: Set matrix
         id: set-matrix
@@ -31,7 +31,7 @@ jobs:
       images: ${{ steps.set-matrix.outputs.images }}
     steps:
       - name: Check out the source code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v6.0.1
 
       - name: Set matrix
         id: set-matrix
@@ -47,7 +47,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check out the repo
-        uses: actions/checkout@v6
+        uses: actions/checkout@v6.0.1
         with:
           fetch-depth: 0
 
@@ -104,7 +104,7 @@ jobs:
         image: ${{ fromJson(needs.prepare-others.outputs.images) }}
     steps:
       - name: Check out the repo
-        uses: actions/checkout@v6
+        uses: actions/checkout@v6.0.1
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index ea15076..4d62989 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -30,7 +30,7 @@ jobs:
             build-mode: none
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v6.0.1
 
       - name: Initialize CodeQL
         uses: github/codeql-action/init@v4
diff --git a/.github/workflows/features-auto.yml b/.github/workflows/features-auto.yml
index 79cddf5..b08dd61 100644
--- a/.github/workflows/features-auto.yml
+++ b/.github/workflows/features-auto.yml
@@ -54,7 +54,7 @@ jobs:
             baseImage: mcr.microsoft.com/devcontainers/base:alpine
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v6.0.1
 
       - name: Install @devcontainers/cli
         run: npm install -g @devcontainers/cli
diff --git a/.github/workflows/features-global.yml b/.github/workflows/features-global.yml
index 4b0b87c..2ed50d6 100644
--- a/.github/workflows/features-global.yml
+++ b/.github/workflows/features-global.yml
@@ -32,7 +32,7 @@ jobs:
           - php84-ubuntu-base
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v6.0.1
 
       - name: Install @devcontainers/cli
         run: npm install -g @devcontainers/cli
diff --git a/.github/workflows/features-scenarios.yml b/.github/workflows/features-scenarios.yml
index 8430db2..34591ee 100644
--- a/.github/workflows/features-scenarios.yml
+++ b/.github/workflows/features-scenarios.yml
@@ -58,7 +58,7 @@ jobs:
           - feature: wptl
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v6.0.1
 
       - name: Install @devcontainers/cli
         run: npm install -g @devcontainers/cli
diff --git a/.github/workflows/generate-docs.yml b/.github/workflows/generate-docs.yml
index e1c3f71..a803fb4 100644
--- a/.github/workflows/generate-docs.yml
+++ b/.github/workflows/generate-docs.yml
@@ -22,7 +22,7 @@ jobs:
       pull-requests: write
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v6.0.1
   
       - name: Generate documentation
         uses: devcontainers/action@1082abd5d2bf3a11abccba70eef98df068277772 # v1.4.3
diff --git a/.github/workflows/sanity-checks.yml b/.github/workflows/sanity-checks.yml
index 042fdc3..f79916a 100644
--- a/.github/workflows/sanity-checks.yml
+++ b/.github/workflows/sanity-checks.yml
@@ -12,7 +12,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check out the source code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v6.0.1
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/shellcheck.yml b/.github/workflows/shellcheck.yml
index e023a68..b87ff57 100644
--- a/.github/workflows/shellcheck.yml
+++ b/.github/workflows/shellcheck.yml
@@ -13,7 +13,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check out source code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v6.0.1
 
       - name: Add error matcher
         run: echo "::add-matcher::$(pwd)/.github/problem-matcher-gcc.json"
diff --git a/.github/workflows/ubuntu-cross.yml b/.github/workflows/ubuntu-cross.yml
index 9a9f49b..1df2044 100644
--- a/.github/workflows/ubuntu-cross.yml
+++ b/.github/workflows/ubuntu-cross.yml
@@ -27,7 +27,7 @@ jobs:
       id-token: write
     steps:
       - name: Checkout repository
-        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
+        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
 
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3.11.1
diff --git a/.github/workflows/validate.yml b/.github/workflows/validate.yml
index 64e8a6f..c6ba9cd 100644
--- a/.github/workflows/validate.yml
+++ b/.github/workflows/validate.yml
@@ -17,7 +17,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v6.0.1
 
       - name: Validate devcontainer-feature.json files
         uses: devcontainers/action@1082abd5d2bf3a11abccba70eef98df068277772 # v1.4.3