diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index c79a4bd..ab889e3 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -17,7 +17,7 @@ jobs:
       latest: ${{ steps.versions.outputs.latest }}
     steps:
       - name: check out code
-        uses: actions/checkout@v4.1.7
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
       - uses: arnested/go-version-action@v1.1.16
         id: versions
 
@@ -36,7 +36,7 @@ jobs:
         go-version: ${{ matrix.go-version }}
 
     - name: check out code
-      uses: actions/checkout@v4.1.7
+      uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
     
     - name: install
       run: go install -mod=readonly ./cmd/tuplip