diff --git a/.forgejo/workflows/fetch-upstream-cdi.yaml b/.forgejo/workflows/fetch-upstream-cdi.yaml
index 3fc3188..43ab905 100644
--- a/.forgejo/workflows/fetch-upstream-cdi.yaml
+++ b/.forgejo/workflows/fetch-upstream-cdi.yaml
@@ -18,7 +18,7 @@ jobs:
     runs-on: docker
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
         with:
           fetch-depth: 0
 
diff --git a/.forgejo/workflows/fetch-upstream.yaml b/.forgejo/workflows/fetch-upstream.yaml
index 1e1d316..4297f6e 100644
--- a/.forgejo/workflows/fetch-upstream.yaml
+++ b/.forgejo/workflows/fetch-upstream.yaml
@@ -18,7 +18,7 @@ jobs:
     runs-on: docker
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
         with:
           fetch-depth: 0