diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 067a032..b984852 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -6,7 +6,7 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
       - name: Scan current project
         id: scan
         uses: anchore/scan-action@v6