diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 366580249b..a68ec8c6dc 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -66,7 +66,7 @@ jobs:
       fail-fast: true
     runs-on: macos-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.2
       - uses: actions/setup-java@v5
         with:
           java-version: ${{ env.JAVA_VERSION }}
@@ -102,7 +102,7 @@ jobs:
       fail-fast: true
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.2
       - uses: actions/setup-java@v5
         with:
           java-version: ${{ env.JAVA_VERSION }}
@@ -154,7 +154,7 @@ jobs:
         JAVA_VERSION: ${{ fromJson(needs.java_matrix.outputs.versions) }}
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.2
       - uses: actions/setup-java@v5
         with:
           java-version: ${{ matrix.JAVA_VERSION }}
@@ -180,7 +180,7 @@ jobs:
     needs: [ build ]
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.2
       - name: Set up JDK
         uses: actions/setup-java@v5
         with:
@@ -202,7 +202,7 @@ jobs:
     needs: [ build, download_test_data ]
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.2
       - name: Set up JDK
         uses: actions/setup-java@v5
         with:
@@ -234,7 +234,7 @@ jobs:
       fail-fast: true
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.2
       - name: Set up JDK
         uses: actions/setup-java@v5
         with:
@@ -288,7 +288,7 @@ jobs:
           - { id: eb-eftpi, cmd: ./run-eb-tests.sh -100 electronFTpion   }
     runs-on: ${{ matrix.runner }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.2
       - name: Set up JDK
         uses: actions/setup-java@v5
         with:
@@ -319,7 +319,7 @@ jobs:
       fail-fast: true
     runs-on: macos-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.2
       - name: Set up JDK
         uses: actions/setup-java@v5
         with:
@@ -347,7 +347,7 @@ jobs:
     needs: [ build ]
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.2
       - name: Set up JDK
         uses: actions/setup-java@v5
         with:
@@ -374,7 +374,7 @@ jobs:
     needs: [ unit_tests ]
     steps:
       ### mkdocs
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.2
       - name: install mkdocs dependencies
         run: python -m pip install -r docs/mkdocs/requirements.txt
       - name: generate mkdocs
@@ -433,7 +433,7 @@ jobs:
       RUN_ID: ${{ github.run_id }}
       TAG_NAME: ${{ github.ref_name }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.2
       - uses: actions/download-artifact@v8
         with:
           name: build_ubuntu-latest
diff --git a/.github/workflows/submodule.yml b/.github/workflows/submodule.yml
index 0141491d6a..92fcede159 100644
--- a/.github/workflows/submodule.yml
+++ b/.github/workflows/submodule.yml
@@ -15,7 +15,7 @@ jobs:
     if: github.actor == 'dependabot[bot]'
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.2
         with:
           fetch-depth: 0
           submodules: true