diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index de40356e..55c876b3 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -283,7 +283,7 @@ jobs:
             sdk_version_env: DOTNET_SDK_VERSION
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
         with:
           submodules: true
       - name: Load versions