diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index f64bf69..5bb0b32 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -12,7 +12,7 @@ jobs:
     timeout-minutes: 15
 
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
     - name: Set up JDK 17
       uses: actions/setup-java@v4
       with: