diff --git a/.github/workflows/release-github.yaml b/.github/workflows/release-github.yaml
index d4ce2627..51eec4ba 100644
--- a/.github/workflows/release-github.yaml
+++ b/.github/workflows/release-github.yaml
@@ -12,7 +12,7 @@ jobs:
     permissions:
       contents: write
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
         with:
           persist-credentials: false
       - uses: cucumber/action-create-github-release@cf2c6f77ba35d2424362e83393a1c4c004cf2ddb # v1.1.1