diff --git a/.github/workflows/call-detekt-validation.yml b/.github/workflows/call-detekt-validation.yml
index 663c30b..b73ce33 100644
--- a/.github/workflows/call-detekt-validation.yml
+++ b/.github/workflows/call-detekt-validation.yml
@@ -6,7 +6,7 @@ jobs:
     name: "Check project by detekt"
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.2
       - name: Set up JDK 1.17
         uses: actions/setup-java@v5
         with:
diff --git a/.github/workflows/call-gradle-wrapper-validation.yml b/.github/workflows/call-gradle-wrapper-validation.yml
index 29cb46a..8aa3740 100644
--- a/.github/workflows/call-gradle-wrapper-validation.yml
+++ b/.github/workflows/call-gradle-wrapper-validation.yml
@@ -7,6 +7,6 @@ jobs:
     name: "Gradle Wrapper Validation"
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.2
       - name: Validate Gradle Wrapper
         uses: gradle/wrapper-validation-action@v3
\ No newline at end of file
diff --git a/.github/workflows/call-publish-validation.yml b/.github/workflows/call-publish-validation.yml
index a4616cc..1b04145 100644
--- a/.github/workflows/call-publish-validation.yml
+++ b/.github/workflows/call-publish-validation.yml
@@ -29,7 +29,7 @@ jobs:
       ORG_GRADLE_PROJECT_signingInMemoryKeyId: ${{ secrets.ORG_GRADLE_PROJECT_SIGNINGINMEMORYKEYID }}
       ORG_GRADLE_PROJECT_signingInMemoryKeyPassword: ${{ secrets.ORG_GRADLE_PROJECT_SIGNINGINMEMORYKEYPASSWORD }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.2
       - name: Set up JDK 1.17
         uses: actions/setup-java@v5
         with:
diff --git a/.github/workflows/call-release-mkdocs.yml b/.github/workflows/call-release-mkdocs.yml
index ac0c381..3500ad7 100644
--- a/.github/workflows/call-release-mkdocs.yml
+++ b/.github/workflows/call-release-mkdocs.yml
@@ -9,7 +9,7 @@ jobs:
     outputs:
       DOCS_FILES_CHANGED: ${{ steps.docs_changed.outputs.any_changed }}
     steps:
-      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           submodules: 'recursive'
       - name: Check that docs changed
@@ -24,7 +24,7 @@ jobs:
     if: needs.check_docs_files_change.outputs.DOCS_FILES_CHANGED == 'true'
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.2
       - uses: actions/setup-python@v6
         with:
           python-version: 3.x
diff --git a/.github/workflows/call-release.yml b/.github/workflows/call-release.yml
index bf83f12..2c43b2b 100644
--- a/.github/workflows/call-release.yml
+++ b/.github/workflows/call-release.yml
@@ -24,7 +24,7 @@ jobs:
       ORG_GRADLE_PROJECT_signingInMemoryKeyId: ${{ secrets.ORG_GRADLE_PROJECT_SIGNINGINMEMORYKEYID }}
       ORG_GRADLE_PROJECT_signingInMemoryKeyPassword: ${{ secrets.ORG_GRADLE_PROJECT_SIGNINGINMEMORYKEYPASSWORD }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.2
       - name: Set up JDK 1.17
         uses: actions/setup-java@v5
         with:
@@ -44,7 +44,7 @@ jobs:
     permissions:
       contents: write
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.2
       # steps.properties.outputs.project-version-string
       # steps.properties.outputs.project-name
       - uses: christian-draeger/read-properties@1.1.1
diff --git a/.github/workflows/call-tests-validation.yml b/.github/workflows/call-tests-validation.yml
index 0f65f64..1c55448 100644
--- a/.github/workflows/call-tests-validation.yml
+++ b/.github/workflows/call-tests-validation.yml
@@ -11,7 +11,7 @@ jobs:
     name: "Run tests"
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.2
       - name: Set up JDK 1.17
         uses: actions/setup-java@v5
         with: