diff --git a/.github/workflows/ci-data-sanitization-log-providers.yml b/.github/workflows/ci-data-sanitization-log-providers.yml
index a9a4dca..b00eae9 100644
--- a/.github/workflows/ci-data-sanitization-log-providers.yml
+++ b/.github/workflows/ci-data-sanitization-log-providers.yml
@@ -41,7 +41,7 @@ jobs:
       matrix:
         node-version: [20, 22, 24]
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
         with:
           persist-credentials: false
       - run: corepack enable
diff --git a/.github/workflows/ci-data-sanitization.yml b/.github/workflows/ci-data-sanitization.yml
index f1f7fb1..8b10d40 100644
--- a/.github/workflows/ci-data-sanitization.yml
+++ b/.github/workflows/ci-data-sanitization.yml
@@ -39,7 +39,7 @@ jobs:
       matrix:
         node-version: [20, 22, 24]
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
         with:
           persist-credentials: false
       - run: corepack enable
diff --git a/.github/workflows/ci-root.yml b/.github/workflows/ci-root.yml
index 3fbf119..b95663c 100644
--- a/.github/workflows/ci-root.yml
+++ b/.github/workflows/ci-root.yml
@@ -38,7 +38,7 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
         with:
           persist-credentials: false
       - run: corepack enable
diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index d20d385..4e11618 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -38,7 +38,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
         with:
           persist-credentials: false