diff --git a/.github/workflows/dist-check.yml b/.github/workflows/dist-check.yml
index b3de08b..ea23801 100644
--- a/.github/workflows/dist-check.yml
+++ b/.github/workflows/dist-check.yml
@@ -15,7 +15,7 @@ jobs:
     name: Verify committed build is current
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
       - uses: oven-sh/setup-bun@v2
         with:
           bun-version: 1.4.2
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 73e4968..e1361db 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -12,7 +12,7 @@ jobs:
     timeout-minutes: 5
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
       - uses: oven-sh/setup-bun@v2
         with:
           bun-version: 1.4.2