diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 07bbd5ec..d6f04718 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -12,7 +12,7 @@ jobs:
     permissions:
       contents: read
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v6.0.2
     - uses: actions/setup-node@v6.4.0
       with:
         node-version: 24
@@ -26,7 +26,7 @@ jobs:
     permissions:
       contents: read
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v6.0.2
     - uses: ./
       id: filter
       with:
diff --git a/.github/workflows/pull-request-verification.yml b/.github/workflows/pull-request-verification.yml
index 12a6cea0..ef0a0611 100644
--- a/.github/workflows/pull-request-verification.yml
+++ b/.github/workflows/pull-request-verification.yml
@@ -12,7 +12,7 @@ jobs:
     permissions:
       contents: read
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v6.0.2
     - uses: actions/setup-node@v6.4.0
       with:
         node-version: 24
@@ -27,7 +27,7 @@ jobs:
       contents: read
       pull-requests: read
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v6.0.2
     - uses: ./
       id: filter
       with:
@@ -49,7 +49,7 @@ jobs:
       contents: read
       pull-requests: read
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v6.0.2
     - uses: ./
       id: filter
       with:
@@ -63,7 +63,7 @@ jobs:
     permissions:
       contents: read
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v6.0.2
     - uses: ./
       id: filter
       with:
@@ -78,7 +78,7 @@ jobs:
     permissions:
       contents: read
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v6.0.2
       with:
         path: somewhere
     - uses: ./somewhere
@@ -96,7 +96,7 @@ jobs:
     permissions:
       contents: read
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v6.0.2
     - run: echo "NEW FILE" > local
     - run: git add local
     - uses: ./
@@ -118,7 +118,7 @@ jobs:
     permissions:
       contents: read
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v6.0.2
     - name: configure GIT user
       run: git config user.email "john@nowhere.local" && git config user.name "John Doe"
     - name: modify working tree