diff --git a/.github/workflows/rust-publish.yml b/.github/workflows/rust-publish.yml
index 0f4ff10..df4d6af 100644
--- a/.github/workflows/rust-publish.yml
+++ b/.github/workflows/rust-publish.yml
@@ -24,7 +24,7 @@ jobs:
       id-token: write
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v6.0.2
       with:
         ref: ${{ github.event.release.target_commitish }}
     # Install manually as different crates may have custom toolchains defined
diff --git a/.github/workflows/rust-stability.yml b/.github/workflows/rust-stability.yml
index 7dbb2e3..6ee853c 100644
--- a/.github/workflows/rust-stability.yml
+++ b/.github/workflows/rust-stability.yml
@@ -22,7 +22,7 @@ jobs:
         channel: ["stable", "beta", "nightly"]
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v6.0.2
     - name: update rust
       run: rustup set profile default && rustup install ${{ matrix.channel }}
     - name: Set bootstrap
@@ -37,7 +37,7 @@ jobs:
         channel: ["stable", "beta", "nightly"]
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v6.0.2
     - name: update rust
       run: rustup set profile default && rustup install ${{ matrix.channel }}
     - name: Set bootstrap
@@ -53,7 +53,7 @@ jobs:
       contents: read
       issues: write
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v6.0.2
     - name: Create issue on failure
       if: ${{ github.event_name != 'pull_request' && (needs.test.result == 'failure' || needs.lint.result == 'failure') }}
       env:
diff --git a/.github/workflows/rust.yml b/.github/workflows/rust.yml
index 6f83b2f..e544974 100644
--- a/.github/workflows/rust.yml
+++ b/.github/workflows/rust.yml
@@ -32,7 +32,7 @@ jobs:
     runs-on: ubuntu-latest
     
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v6.0.2
     - name: Run tests
       run: cargo test
 
@@ -43,7 +43,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v6.0.2
     - name: clippy
       run: cargo clippy -- --deny warnings
 
@@ -54,7 +54,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v6.0.2
     - name: fmt
       run: cargo fmt --check
 
@@ -75,7 +75,7 @@ jobs:
       RUSTC_BOOTSTRAP: 1
 
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v6.0.2
     - name: install cargo-msrv
       uses: taiki-e/install-action@v2.79.7
       with: