diff --git a/.github/workflows/run-renovate.yaml b/.github/workflows/run-renovate.yaml
index 57f26bc..63e3ca1 100644
--- a/.github/workflows/run-renovate.yaml
+++ b/.github/workflows/run-renovate.yaml
@@ -40,7 +40,7 @@ jobs:
           private_key: ${{ secrets.app_private_key }}
 
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
         with:
           token: '${{ steps.generate-token.outputs.token }}'