diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index cbca751..5cb8828 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -24,7 +24,7 @@ jobs:
           - macos-26 # arm runner
     runs-on: ${{ matrix.os }}
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
     - run: bazel --version
     - name: Test
       run: make test