diff --git a/.github/workflows/api-level-lint.yml b/.github/workflows/api-level-lint.yml
index 5fdc02ebd..191d56f91 100644
--- a/.github/workflows/api-level-lint.yml
+++ b/.github/workflows/api-level-lint.yml
@@ -14,7 +14,7 @@ jobs:
   lint-api-level:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v2.3.4
       - uses: actions/setup-java@v2
         with:
           distribution: 'adopt'
diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index 7ed1ab092..7d984b319 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -16,7 +16,7 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v2
+      uses: actions/checkout@v2.3.4
       with:
         # We must fetch at least the immediate parents so that if this is
         # a pull request then we can checkout the head.
diff --git a/.github/workflows/sample-build-check.yml b/.github/workflows/sample-build-check.yml
index 960d89731..be4146069 100644
--- a/.github/workflows/sample-build-check.yml
+++ b/.github/workflows/sample-build-check.yml
@@ -10,7 +10,7 @@ jobs:
   samples-build-check-device-code:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v2.3.4
     - uses: actions/setup-java@v2
       with:
         distribution: 'adopt'
@@ -24,7 +24,7 @@ jobs:
   samples-build-check-interactive:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v2.3.4
     - uses: actions/setup-java@v2
       with:
         distribution: 'adopt'