diff --git a/.github/workflows/rust-wasm.yml b/.github/workflows/rust-wasm.yml
index 62ababaa..22beb46a 100644
--- a/.github/workflows/rust-wasm.yml
+++ b/.github/workflows/rust-wasm.yml
@@ -35,7 +35,7 @@ jobs:
     runs-on: ${{ matrix.os }}
 
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
       - name: Rust Cache
         uses: Swatinem/rust-cache@v2.6.2
         with:
diff --git a/.github/workflows/rust.yml b/.github/workflows/rust.yml
index 7c2b750e..5d253bc3 100644
--- a/.github/workflows/rust.yml
+++ b/.github/workflows/rust.yml
@@ -19,7 +19,7 @@ jobs:
     runs-on: ${{ matrix.os }}
 
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
     - name: Rust Cache
       uses: Swatinem/rust-cache@v2.6.2
       with:
diff --git a/.github/workflows/todo-as-issue.yml b/.github/workflows/todo-as-issue.yml
index 4c4d71f7..35ada560 100644
--- a/.github/workflows/todo-as-issue.yml
+++ b/.github/workflows/todo-as-issue.yml
@@ -10,7 +10,7 @@ jobs:
     build:
         runs-on: "ubuntu-latest"
         steps:
-            - uses: "actions/checkout@v3"
+            - uses: "actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac" # v4
             - name: "TODO to Issue"
               uses: "alstr/todo-to-issue-action@v4"
               with: