diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index 7e96e62..6f81efc 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -18,7 +18,7 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v2
+        uses: actions/checkout@v2.3.4
 
       - name: Setup PHP
         uses: shivammathur/setup-php@v2
diff --git a/.github/workflows/rector.yml b/.github/workflows/rector.yml
index 5b1efb1..1615608 100644
--- a/.github/workflows/rector.yml
+++ b/.github/workflows/rector.yml
@@ -9,13 +9,13 @@ jobs:
     steps:
       - if: github.event.pull_request.head.repo.full_name == github.repository
         name: Checkout code
-        uses: actions/checkout@v2
+        uses: actions/checkout@v2.3.4
         with:
           token: ${{ secrets.ACCESS_TOKEN }}
 
       - if: github.event.pull_request.head.repo.full_name != github.repository
         name: Checkout code
-        uses: actions/checkout@v2
+        uses: actions/checkout@v2.3.4
 
       - name: Setup PHP
         uses: shivammathur/setup-php@v2
diff --git a/.github/workflows/shiftleft-analysis.yml b/.github/workflows/shiftleft-analysis.yml
index ec17e72..bc32e8c 100644
--- a/.github/workflows/shiftleft-analysis.yml
+++ b/.github/workflows/shiftleft-analysis.yml
@@ -11,7 +11,7 @@ jobs:
     # Scan runs on ubuntu, mac and windows
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v2.3.4
     # Instructions
     # 1. Setup JDK, Node.js, Python etc depending on your project type
     # 2. Compile or build the project before invoking scan
diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index 714b4ef..dc233af 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -22,7 +22,7 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v2
+        uses: actions/checkout@v2.3.4
 
       - name: Setup PHP
         uses: shivammathur/setup-php@v2