diff --git a/.github/workflows/e2e.yml b/.github/workflows/e2e.yml
index d04fda5..ccf4afe 100644
--- a/.github/workflows/e2e.yml
+++ b/.github/workflows/e2e.yml
@@ -21,7 +21,7 @@ jobs:
     runs-on: "ubuntu-latest"
     steps:
       - name: "Check out repository"
-        uses: "actions/checkout@v6"
+        uses: "actions/checkout@v6.0.3"
       - name: "Retrieve build output"
         uses: "actions/download-artifact@v8"
         with:
diff --git a/.github/workflows/push.yml b/.github/workflows/push.yml
index b4bed60..31a2a2c 100644
--- a/.github/workflows/push.yml
+++ b/.github/workflows/push.yml
@@ -18,7 +18,7 @@ jobs:
       node-version: ${{ steps.node-version.outputs.node }}
     steps:
       - name: "Check out repository"
-        uses: "actions/checkout@v6"
+        uses: "actions/checkout@v6.0.3"
         with:
           fetch-depth: 0
       - name: "Node version"
@@ -95,7 +95,7 @@ jobs:
       url: "https://hub.docker.com/r/textbook/fauxauth"
     steps:
       - name: "Check out repository"
-        uses: "actions/checkout@v6"
+        uses: "actions/checkout@v6.0.3"
       - name: "Get metadata"
         id: metadata
         run: |
@@ -186,7 +186,7 @@ jobs:
     runs-on: "ubuntu-latest"
     steps:
       - name: "Check out repository"
-        uses: "actions/checkout@v6"
+        uses: "actions/checkout@v6.0.3"
       - name: "Validate published artifacts"
         run: |
           ./bin/smoke-test.sh "${{ github.ref_name }}"