diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 5a53325..d638e2d 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -12,7 +12,7 @@ jobs:
       GOOGLE_SECRET: "dummy"
       OPENAI_API_KEY: "dummy"
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
 
       - uses: supabase/setup-cli@v1
 
diff --git a/.github/workflows/production.yaml b/.github/workflows/production.yaml
index 070aec8..778bf20 100644
--- a/.github/workflows/production.yaml
+++ b/.github/workflows/production.yaml
@@ -19,7 +19,7 @@ jobs:
       OPENAI_API_KEY: "dummy"
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
 
       - uses: supabase/setup-cli@v1
 
diff --git a/.github/workflows/staging.yaml b/.github/workflows/staging.yaml
index 68bfa3f..a18ce3e 100644
--- a/.github/workflows/staging.yaml
+++ b/.github/workflows/staging.yaml
@@ -19,7 +19,7 @@ jobs:
       OPENAI_API_KEY: "dummy"
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
 
       - uses: supabase/setup-cli@v1