diff --git a/.github/workflows/auto-merge.yaml b/.github/workflows/auto-merge.yaml
index 4fdc13206..68e708803 100644
--- a/.github/workflows/auto-merge.yaml
+++ b/.github/workflows/auto-merge.yaml
@@ -14,7 +14,7 @@ jobs:
       checks: read
       statuses: read
     steps:
-      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3
         id: app-token
         with:
diff --git a/.github/workflows/dep-triage.yaml b/.github/workflows/dep-triage.yaml
index 5ce56e523..de3a2e4c1 100644
--- a/.github/workflows/dep-triage.yaml
+++ b/.github/workflows/dep-triage.yaml
@@ -22,7 +22,7 @@ jobs:
       checks: read
       statuses: read
     steps:
-      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - uses: konflux-ci/deptriage@50bf2bb8e60186927f31de5d199ddd30e3229484 # main
         with:
           command: both