diff --git a/.github/workflows/cloud.yml b/.github/workflows/cloud.yml
index 28baa047..d3c4c90a 100644
--- a/.github/workflows/cloud.yml
+++ b/.github/workflows/cloud.yml
@@ -7,7 +7,7 @@ jobs:
   test:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
       - uses: actions/setup-node@v3
         with:
           node-version: 18
@@ -28,7 +28,7 @@ jobs:
     needs: ["test"]
     if: github.ref == 'refs/heads/main'
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
       - uses: actions/setup-node@v3
         with:
           node-version: 18
diff --git a/.github/workflows/webapp.yml b/.github/workflows/webapp.yml
index 18065f0b..1dbe5101 100644
--- a/.github/workflows/webapp.yml
+++ b/.github/workflows/webapp.yml
@@ -11,7 +11,7 @@ jobs:
   test:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
       - uses: actions/setup-node@v3
         with:
           node-version: 18
@@ -33,7 +33,7 @@ jobs:
           # - "dev"
           - "prod"
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
       - uses: actions/setup-node@v3
         with:
           node-version: 18
@@ -75,7 +75,7 @@ jobs:
     if: github.ref == 'refs/heads/main'
     needs: ["test", "build"]
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
       - name: Configure AWS credentials
         uses: aws-actions/configure-aws-credentials@v1
         with: