diff --git a/.github/workflows/checks.yml b/.github/workflows/checks.yml
index 8de8f05d7..f6ead421c 100644
--- a/.github/workflows/checks.yml
+++ b/.github/workflows/checks.yml
@@ -15,7 +15,7 @@ jobs:
         os: [ ubuntu-latest, macos-latest, windows-latest ]
     runs-on: ${{ matrix.os }}
     steps:
-      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+      - uses: actions/checkout@v4.1.0
       - name: Set up Python
         uses: actions/setup-python@v4
         with:
@@ -79,7 +79,7 @@ jobs:
     needs: test
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+      - uses: actions/checkout@v4.1.0
       - name: Download coverage reports
         uses: actions/download-artifact@v3
         with:
@@ -102,7 +102,7 @@ jobs:
         ports:
           - "3000:3000"
     steps:
-      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+      - uses: actions/checkout@v4.1.0
       - name: Set up Python
         uses: actions/setup-python@v4
         with:
diff --git a/.github/workflows/preview_release_pr.yml b/.github/workflows/preview_release_pr.yml
index b8c18bd7c..f251f9229 100644
--- a/.github/workflows/preview_release_pr.yml
+++ b/.github/workflows/preview_release_pr.yml
@@ -7,7 +7,7 @@ jobs:
     if: "!contains(github.event.head_commit.message, 'chore: prepare release')" # Skip merges from releases
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v4.1.0
         with:
           fetch-depth: 0
           token: ${{ secrets.PAT }}
diff --git a/.github/workflows/release-dry-run.yml b/.github/workflows/release-dry-run.yml
index 303dec2d0..fcd54a3f0 100644
--- a/.github/workflows/release-dry-run.yml
+++ b/.github/workflows/release-dry-run.yml
@@ -6,7 +6,7 @@ jobs:
   release:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+      - uses: actions/checkout@v4.1.0
         with:
           fetch-depth: 0
           token: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 6cb5d007b..7fb564f58 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -10,7 +10,7 @@ jobs:
     if: github.head_ref == 'release' && github.event.pull_request.merged == true
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+      - uses: actions/checkout@v4.1.0
         with:
           fetch-depth: 0
           token: ${{ secrets.PAT }}