diff --git a/.github/workflows/dependabot-automerge.yml b/.github/workflows/dependabot-automerge.yml
index 0b790b2..31b0324 100644
--- a/.github/workflows/dependabot-automerge.yml
+++ b/.github/workflows/dependabot-automerge.yml
@@ -16,7 +16,7 @@ jobs:
 
     steps:
       - name: Checkout target branch
-        uses: actions/checkout@v6
+        uses: actions/checkout@v6.0.2
         with:
           ref: ${{ github.event.pull_request.base.ref }}
 
diff --git a/.github/workflows/git-repo-sync.yml b/.github/workflows/git-repo-sync.yml
index a38c102..57790cc 100644
--- a/.github/workflows/git-repo-sync.yml
+++ b/.github/workflows/git-repo-sync.yml
@@ -15,7 +15,7 @@ jobs:
     name: Git Repo Sync - BitBucket
     steps:
     - name: Checkout Repository
-      uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # 5.0.1
+      uses: actions/checkout@0c366fd6a839edf440554fa01a7085ccba70ac98 # 5.0.1
       with:
         fetch-depth: 0
         persist-credentials: false
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index ec6c27f..76ebb15 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -8,7 +8,7 @@ jobs:
     runs-on: ubuntu-22.04
     steps:
       - name: Checkout Repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v6.0.2
         with:
           persist-credentials: false
       - name: Enable CorePack