diff --git a/.github/workflows/CI-Linux.yml b/.github/workflows/CI-Linux.yml
index 7b82c5d..20ab507 100644
--- a/.github/workflows/CI-Linux.yml
+++ b/.github/workflows/CI-Linux.yml
@@ -20,7 +20,7 @@ jobs:
         std: [11, 17]
         mlock: [ON, OFF]
     steps:
-      - uses: actions/checkout@v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - name: Install dependencies
         run: sudo apt-get update && sudo apt-get install -y cmake
       - name: Configure
@@ -35,7 +35,7 @@ jobs:
       matrix:
         mlock: [ON, OFF]
     steps:
-      - uses: actions/checkout@v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - name: Install vcpkg
         run: |
           git clone https://github.com/microsoft/vcpkg.git
diff --git a/.github/workflows/CI-Win.yml b/.github/workflows/CI-Win.yml
index 33ab868..5701254 100644
--- a/.github/workflows/CI-Win.yml
+++ b/.github/workflows/CI-Win.yml
@@ -20,7 +20,7 @@ jobs:
         std: [11, 17]
         mlock: [ON, OFF]
     steps:
-      - uses: actions/checkout@v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - uses: msys2/setup-msys2@v2
         with:
           update: true
diff --git a/.github/workflows/CI-macOS.yml b/.github/workflows/CI-macOS.yml
index 8c566c8..dd2a157 100644
--- a/.github/workflows/CI-macOS.yml
+++ b/.github/workflows/CI-macOS.yml
@@ -20,7 +20,7 @@ jobs:
         std: [11, 17]
         mlock: [ON, OFF]
     steps:
-      - uses: actions/checkout@v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - name: Install dependencies
         run: |
           brew update
@@ -39,7 +39,7 @@ jobs:
       matrix:
         mlock: [ON, OFF]
     steps:
-      - uses: actions/checkout@v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - name: Install vcpkg
         run: |
           git clone https://github.com/microsoft/vcpkg.git
diff --git a/.github/workflows/benchmarks.yml b/.github/workflows/benchmarks.yml
index 5005114..8ceae32 100644
--- a/.github/workflows/benchmarks.yml
+++ b/.github/workflows/benchmarks.yml
@@ -9,7 +9,7 @@ jobs:
   benchmark:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - name: Install dependencies
         run: sudo apt-get update && sudo apt-get install -y cmake hyperfine
       - name: Run benchmarks
diff --git a/.github/workflows/secure_zero_odr.yml b/.github/workflows/secure_zero_odr.yml
index 479bd85..e1708b2 100644
--- a/.github/workflows/secure_zero_odr.yml
+++ b/.github/workflows/secure_zero_odr.yml
@@ -7,7 +7,7 @@ jobs:
   odr:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: Install dependencies
         run: |
@@ -24,4 +24,4 @@ jobs:
             -o secure_zero_odr
             
       - name: Run secure_zero ODR sample
-        run: ./secure_zero_odr
\ No newline at end of file
+        run: ./secure_zero_odr