diff --git a/.github/workflows/cleanup-empty-translations.yml b/.github/workflows/cleanup-empty-translations.yml
index 69c6830421..bc57725772 100644
--- a/.github/workflows/cleanup-empty-translations.yml
+++ b/.github/workflows/cleanup-empty-translations.yml
@@ -9,7 +9,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.2
 
       - name: Setup PHP
         uses: shivammathur/setup-php@v2
diff --git a/.github/workflows/monorepo-split-packages.yml b/.github/workflows/monorepo-split-packages.yml
index 1174401da3..b016ca2e85 100644
--- a/.github/workflows/monorepo-split-packages.yml
+++ b/.github/workflows/monorepo-split-packages.yml
@@ -84,7 +84,7 @@ jobs:
           
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.2
 
       # Search and replace "moox/core": "*" with "moox/core": "^3.1.3" in composer.json
       - name: Replace core version in composer.json
diff --git a/.github/workflows/monorepo-split-plugins.yml b/.github/workflows/monorepo-split-plugins.yml
index 2212f20c89..24e8a70a33 100644
--- a/.github/workflows/monorepo-split-plugins.yml
+++ b/.github/workflows/monorepo-split-plugins.yml
@@ -16,7 +16,7 @@ jobs:
       fail-fast: false
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.2
 
       - if: "!startsWith(github.ref, 'refs/tags/')"
         uses: "symplify/monorepo-split-github-action@v2.4.4"
diff --git a/.github/workflows/pest.yml b/.github/workflows/pest.yml
index ec32340f3a..e2365255f3 100644
--- a/.github/workflows/pest.yml
+++ b/.github/workflows/pest.yml
@@ -35,7 +35,7 @@ jobs:
         options: --health-cmd="mysqladmin ping" --health-interval=10s --health-timeout=5s --health-retries=3
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.2
 
       - name: Setup PHP
         uses: shivammathur/setup-php@v2
diff --git a/.github/workflows/phpstan.yml b/.github/workflows/phpstan.yml
index e91d660f7a..effcc16f3a 100644
--- a/.github/workflows/phpstan.yml
+++ b/.github/workflows/phpstan.yml
@@ -13,7 +13,7 @@ jobs:
     outputs:
       artifact-name: app-artifact
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.2
 
       - name: Setup PHP
         uses: shivammathur/setup-php@v2
@@ -37,7 +37,7 @@ jobs:
     needs: build
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.2
 
       - name: Download App Artifact
         uses: actions/download-artifact@v8
diff --git a/.github/workflows/pint.yml b/.github/workflows/pint.yml
index 6f16c92d29..28b029c8d4 100644
--- a/.github/workflows/pint.yml
+++ b/.github/workflows/pint.yml
@@ -12,7 +12,7 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v6.0.2
         with:
           ref: ${{ github.head_ref }}
           token: ${{ secrets.BOT || github.token }}
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index 090554e07c..f18ca4d652 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -34,7 +34,7 @@ jobs:
 
     steps:
       - name: "Checkout code"
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           persist-credentials: false
 
diff --git a/.github/workflows/split.yml b/.github/workflows/split.yml
index eaf6ec585a..7bb5195bc6 100644
--- a/.github/workflows/split.yml
+++ b/.github/workflows/split.yml
@@ -73,7 +73,7 @@ jobs:
         package: ${{ fromJson(needs.prepare.outputs.package-list) }}
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.2
 
       - name: Get package stability and determine version
         working-directory: packages/${{ matrix.package }}