diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index a110245..748f11b 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -18,7 +18,7 @@ jobs:
           - "3.3"
           - "3.4"
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
       - uses: ruby/setup-ruby@v1
         with:
           ruby-version: "${{ matrix.ruby-version }}"
diff --git a/.github/workflows/gem-push.yaml b/.github/workflows/gem-push.yaml
index c276be6..2ad4bf5 100644
--- a/.github/workflows/gem-push.yaml
+++ b/.github/workflows/gem-push.yaml
@@ -12,7 +12,7 @@ jobs:
       contents: read
 
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
     - name: Set up Ruby 3.4
       uses: ruby/setup-ruby@v1
       with: