diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index 41f1d94e..204f56f5 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -6,7 +6,7 @@ jobs:
   rubocop:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.2
 
       - uses: ruby/setup-ruby@v1.308.0
         with:
diff --git a/.github/workflows/push_gem.yml b/.github/workflows/push_gem.yml
index b179afd8..27fcb950 100644
--- a/.github/workflows/push_gem.yml
+++ b/.github/workflows/push_gem.yml
@@ -28,7 +28,7 @@ jobs:
         with:
           egress-policy: audit
 
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - name: Set up Ruby
         uses: ruby/setup-ruby@97ecb7b512899eb71ab1bf2310a624c6f1589ac6 # v1.308.0
         with:
diff --git a/.github/workflows/stable.yml b/.github/workflows/stable.yml
index aa4d32e0..d14f8059 100644
--- a/.github/workflows/stable.yml
+++ b/.github/workflows/stable.yml
@@ -31,7 +31,7 @@ jobs:
             ruby-version: ruby
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.2
 
       - name: Remove Gemfile.lock
         run: rm Gemfile.lock
diff --git a/.github/workflows/typecheck.yml b/.github/workflows/typecheck.yml
index 71b9c7cd..09265e2a 100644
--- a/.github/workflows/typecheck.yml
+++ b/.github/workflows/typecheck.yml
@@ -9,7 +9,7 @@ jobs:
       run:
         working-directory: html_frontend
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.2
 
       - uses: oven-sh/setup-bun@v2
 
diff --git a/.github/workflows/unstable.yml b/.github/workflows/unstable.yml
index 77fe5c4c..d7e1a213 100644
--- a/.github/workflows/unstable.yml
+++ b/.github/workflows/unstable.yml
@@ -27,7 +27,7 @@ jobs:
             ruby-version: ruby-head
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.2
 
       - uses: ruby/setup-ruby@v1.308.0
         with: