diff --git a/.github/workflows/python-checks.yml b/.github/workflows/python-checks.yml
index 7f4e39d867..d204b29282 100644
--- a/.github/workflows/python-checks.yml
+++ b/.github/workflows/python-checks.yml
@@ -17,7 +17,7 @@ jobs:
                 python-version: ["3.8", "3.9", "3.10", "3.11", "3.12"]
                 os: ["ubuntu-latest", "windows-latest", "macos-latest"]
                 limited-dependencies: ["", "TRUE"]
-
+        
         runs-on: ${{ matrix.os }}
 
         steps:
@@ -29,8 +29,11 @@ jobs:
                   python-version: ${{ matrix.python-version }}
 
             - name: Install uv
-              run: |
-                pip install uv
+            - run: |
+                pip install uv == 0.4.7 \
+                  --hash=sha256:ec49a00317799226d33135bf40e8da44262f44e3980a5bb9e6dae7250523c963 \   # manylinux: glibc 2.17+ x86-64
+                  --hash=sha256:319a585f53c0b63b989526206383716e1d7c0f3483425058b94bf47402a81841 \   # Windows x86-64
+                  --hash=sha256:bfbd6e28b0543b774db7d97d61963c384c70284e95056004c8f74252e69616c7     # macOS 11.0+ ARM64
 
             - name: Install dependencies
               env:
@@ -56,7 +59,8 @@ jobs:
 
             - name: Install uv
               run: |
-                pip install uv
+                pip install uv == 0.4.7 \
+                  --hash=sha256:ec49a00317799226d33135bf40e8da44262f44e3980a5bb9e6dae7250523c963 \   # manylinux: glibc 2.17+ x86-64
 
             - name: Install ruff
               run: |
@@ -79,7 +83,8 @@ jobs:
 
             - name: Install uv
               run: |
-                pip install uv
+                pip install uv == 0.4.7 \
+                  --hash=sha256:ec49a00317799226d33135bf40e8da44262f44e3980a5bb9e6dae7250523c963 \   # manylinux: glibc 2.17+ x86-64
 
             - name: Install isort
               run: |
@@ -102,7 +107,8 @@ jobs:
 
             - name: Install uv
               run: |
-                pip install uv
+                pip install uv == 0.4.7 \
+                  --hash=sha256:ec49a00317799226d33135bf40e8da44262f44e3980a5bb9e6dae7250523c963 \   # manylinux: glibc 2.17+ x86-64
 
             - name: Install ruff
               run: |
@@ -125,7 +131,8 @@ jobs:
 
             - name: Install uv
               run: |
-                pip install uv
+                pip install uv == 0.4.7 \
+                  --hash=sha256:ec49a00317799226d33135bf40e8da44262f44e3980a5bb9e6dae7250523c963 \   # manylinux: glibc 2.17+ x86-64
 
             - name: Install bandit
               run: |
@@ -148,7 +155,8 @@ jobs:
 
             - name: Install uv
               run: |
-                pip install uv
+                pip install uv == 0.4.7 \
+                  --hash=sha256:ec49a00317799226d33135bf40e8da44262f44e3980a5bb9e6dae7250523c963 \   # manylinux: glibc 2.17+ x86-64
 
             - name: Install dependencies
               run: |