diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 93ca89fec..eb078df09 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -31,7 +31,7 @@ jobs:
         uses: ublue-os/remove-unwanted-software@v9
 
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
 
       - name: Restore ccache
         # Don't use cache on releases as github does not allow it
diff --git a/.github/workflows/publish-aur.yml b/.github/workflows/publish-aur.yml
index 8fa146d51..7318e9ec8 100644
--- a/.github/workflows/publish-aur.yml
+++ b/.github/workflows/publish-aur.yml
@@ -35,7 +35,7 @@ jobs:
     environment: prod
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
       - name: Create PKGBUILD dir
         run: mkdir -p ./pkg/
       - name: Build PKGBUILD