diff --git a/.github/workflows/cd-config.yml b/.github/workflows/cd-config.yml
index 722427b6d75..b5d9397f6e6 100644
--- a/.github/workflows/cd-config.yml
+++ b/.github/workflows/cd-config.yml
@@ -31,7 +31,7 @@ jobs:
             envName: "Development"
 
     steps:
-      - uses: actions/checkout@v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
 
       - name: Set up JDK 17
         uses: actions/setup-java@v5.6.0
diff --git a/.github/workflows/ci-config.yml b/.github/workflows/ci-config.yml
index 58045f1bbac..9314bbb3c8b 100644
--- a/.github/workflows/ci-config.yml
+++ b/.github/workflows/ci-config.yml
@@ -19,7 +19,7 @@ jobs:
       fail-fast: false
 
     steps:
-      - uses: actions/checkout@v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
 
       - name: Set up JDK ${{ matrix.java }}
         uses: actions/setup-java@v5.6.0
@@ -55,7 +55,7 @@ jobs:
         java: [ 17 ]
 
     steps:
-      - uses: actions/checkout@v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
 
       - name: Set up JDK ${{ matrix.java }}
         uses: actions/setup-java@v5.6.0
@@ -78,7 +78,7 @@ jobs:
         java: [ 17 ]
 
     steps:
-      - uses: actions/checkout@v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
 
       - name: Set up JDK ${{ matrix.java }}
         uses: actions/setup-java@v5.6.0
@@ -98,7 +98,7 @@ jobs:
     if: ${{ github.actor != 'dependabot[bot]' }}
 
     steps:
-      - uses: actions/checkout@v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
 
       - name: Set up JDK 17
         uses: actions/setup-java@v5.6.0
diff --git a/.github/workflows/site-ci-config.yml b/.github/workflows/site-ci-config.yml
index f41a46b82ec..c2dd9ee25ea 100644
--- a/.github/workflows/site-ci-config.yml
+++ b/.github/workflows/site-ci-config.yml
@@ -19,7 +19,7 @@ jobs:
         java: [ 17 ]
 
     steps:
-      - uses: actions/checkout@v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
 
       - name: Set up JDK ${{ matrix.java }}
         uses: actions/setup-java@v5.6.0