diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index c47e0bc..f49d4c5 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -11,7 +11,7 @@ jobs:
     name: release ${{ matrix.os }}/${{ matrix.arch }}
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
       - uses: wangyoucao577/go-release-action@v1.20
         if: matrix.os != 'darwin' || matrix.arch != '386' && matrix.arch != 'arm'
         with:
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 88fbe6c..6442dd3 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -14,7 +14,7 @@ jobs:
 
     runs-on: ${{ matrix.os }}
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
 
       - name: Set up Go
         uses: actions/setup-go@v2