diff --git a/.github/workflows/gh-pages.yml b/.github/workflows/gh-pages.yml
index 16579bcba4..79782c0060 100644
--- a/.github/workflows/gh-pages.yml
+++ b/.github/workflows/gh-pages.yml
@@ -20,7 +20,7 @@ jobs:
     if: ${{ github.repository == 'ruby/reline' && !startsWith(github.event_name, 'pull') }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v6.0.0
       - name: Setup Ruby
         uses: ruby/setup-ruby@f26937343756480a8cb3ae1f623b9c8d89ed6984 # v1.196.0
         with:
diff --git a/.github/workflows/push_gem.yml b/.github/workflows/push_gem.yml
index cca604a369..90aeafcc1c 100644
--- a/.github/workflows/push_gem.yml
+++ b/.github/workflows/push_gem.yml
@@ -27,7 +27,7 @@ jobs:
         with:
           egress-policy: audit
 
-      - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v4.2.2
+      - uses: actions/checkout@c2d88d3ecc89a9ef08eebf45d9637801dcee7eb5 # v4.2.2
 
       - name: Set up Ruby
         uses: ruby/setup-ruby@13e7a03dc3ac6c3798f4570bfead2aed4d96abfb # v1.244.0
diff --git a/.github/workflows/reline.yml b/.github/workflows/reline.yml
index e371ccc39c..686e8e137d 100644
--- a/.github/workflows/reline.yml
+++ b/.github/workflows/reline.yml
@@ -25,7 +25,7 @@ jobs:
         os: [ubuntu-latest, macos-latest, windows-latest]
     timeout-minutes: 30
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.0
       - name: Set up Ruby
         uses: ruby/setup-ruby@v1
         with:
@@ -54,7 +54,7 @@ jobs:
           - { ruby: mswin, os: windows-latest }
     timeout-minutes: 30
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.0
       - name: Set up Ruby
         uses: ruby/setup-ruby@v1
         with:
@@ -85,7 +85,7 @@ jobs:
           - ruby: 2.6
     timeout-minutes: 30
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.0
       - name: Set up Ruby
         uses: ruby/setup-ruby@v1
         with:
@@ -134,7 +134,7 @@ jobs:
         os: [ubuntu-latest]
     timeout-minutes: 30
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.0
       - name: Set up Ruby
         uses: ruby/setup-ruby@v1
         with:
diff --git a/.github/workflows/truffle-ruby-test.yml b/.github/workflows/truffle-ruby-test.yml
index b69f81dc14..adbc78a49e 100644
--- a/.github/workflows/truffle-ruby-test.yml
+++ b/.github/workflows/truffle-ruby-test.yml
@@ -26,7 +26,7 @@ jobs:
         os: [ubuntu-latest, macos-latest]
     timeout-minutes: 30
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.0
       - name: Set up Ruby
         uses: ruby/setup-ruby@v1
         with:
@@ -56,7 +56,7 @@ jobs:
           - ruby: 2.6
     timeout-minutes: 30
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.0
       - name: Set up Ruby
         uses: ruby/setup-ruby@v1
         with:
@@ -95,7 +95,7 @@ jobs:
         os: [ubuntu-latest]
     timeout-minutes: 30
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.0
       - name: Set up Ruby
         uses: ruby/setup-ruby@v1
         with: