diff --git a/.forgejo/workflows/codeberg-mirror.yaml b/.forgejo/workflows/codeberg-mirror.yaml
index 2e3fe71..da12be7 100644
--- a/.forgejo/workflows/codeberg-mirror.yaml
+++ b/.forgejo/workflows/codeberg-mirror.yaml
@@ -10,7 +10,7 @@ jobs:
   codeberg:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v4.1.7
         with:
           fetch-depth: 0
       - uses: https://codeberg.org/devthefuture/repository-mirroring-action.git@v1
diff --git a/.forgejo/workflows/release-charts.yaml b/.forgejo/workflows/release-charts.yaml
index 20cc9b5..73b7abb 100644
--- a/.forgejo/workflows/release-charts.yaml
+++ b/.forgejo/workflows/release-charts.yaml
@@ -9,7 +9,7 @@ jobs:
   release:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4  
+      - uses: actions/checkout@v4.1.7
       - name: Publish Helm charts
         # uses: https://git.devthefuture.org/devthefuture/helm-pages.git@master
         uses: https://git.devthefuture.org/devthefuture/helm-pages.git@67ae29485d9312f224f5b188bc2a0ed9f2f4a4f2
diff --git a/.forgejo/workflows/release-commit.yml b/.forgejo/workflows/release-commit.yml
index bca8ecc..b650445 100644
--- a/.forgejo/workflows/release-commit.yml
+++ b/.forgejo/workflows/release-commit.yml
@@ -18,7 +18,7 @@ jobs:
     runs-on: ubuntu-latest
     name: create release using commit-and-tag-version
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v4.1.7
         with:
           token: ${{ secrets.M8A_ORG_BOT_REPO_TOKEN }}