diff --git a/.github/workflows/default_on_push.yml b/.github/workflows/default_on_push.yml
index 8d3df30f..b0bd9e00 100644
--- a/.github/workflows/default_on_push.yml
+++ b/.github/workflows/default_on_push.yml
@@ -20,7 +20,7 @@ jobs:
     runs-on: ubuntu-20.04
     steps:
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@v2.3.4
         with:
           submodules: recursive
       - name: Set up Docker Buildx
@@ -58,7 +58,7 @@ jobs:
     runs-on: ubuntu-20.04
     steps:
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@v2.3.4
         with:
           submodules: recursive
       - name: Prepare tags
diff --git a/.github/workflows/deploy-docs.yml b/.github/workflows/deploy-docs.yml
index 897b1e27..a9137fb8 100644
--- a/.github/workflows/deploy-docs.yml
+++ b/.github/workflows/deploy-docs.yml
@@ -26,7 +26,7 @@ jobs:
     name: 'Deploy Docs'
     runs-on: ubuntu-20.04
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v2.3.4
 
       - name: 'Check if deploy is for a `v<major>.<minor>` tag version instead of `edge`'
         if: startsWith(github.ref, 'refs/tags/')
@@ -76,10 +76,10 @@ jobs:
     needs: deploy
     steps:
       - name: 'Checkout the tagged commit (shallow clone)'
-        uses: actions/checkout@v2
+        uses: actions/checkout@v2.3.4
 
       - name: 'Checkout the docs deployment branch to a subdirectory'
-        uses: actions/checkout@v2
+        uses: actions/checkout@v2.3.4
         with:
           ref: gh-pages
           path: gh-pages
diff --git a/.github/workflows/linting.yml b/.github/workflows/linting.yml
index 275eb053..b0da07ce 100644
--- a/.github/workflows/linting.yml
+++ b/.github/workflows/linting.yml
@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-20.04
     steps:
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@v2.3.4
         with:
           submodules: recursive
       - name: Hadolint
diff --git a/.github/workflows/pr-docs.yml b/.github/workflows/pr-docs.yml
index 6b97d6aa..5f3dcbb9 100644
--- a/.github/workflows/pr-docs.yml
+++ b/.github/workflows/pr-docs.yml
@@ -16,7 +16,7 @@ jobs:
     name: 'Verify Build'
     runs-on: ubuntu-20.04
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v2.3.4
 
       - name: 'Build with mkdocs-material via Docker'
         run: docker run --rm -v ${PWD}:/docs squidfunk/mkdocs-material:7.1.4 build --strict
diff --git a/.github/workflows/scheduled_builds.yml b/.github/workflows/scheduled_builds.yml
index 04663a15..24fc87db 100644
--- a/.github/workflows/scheduled_builds.yml
+++ b/.github/workflows/scheduled_builds.yml
@@ -9,7 +9,7 @@ jobs:
     runs-on: ubuntu-20.04
     steps:
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@v2.3.4
         with:
           ref: stable
           submodules: recursive
diff --git a/.github/workflows/test_merge_requests.yml b/.github/workflows/test_merge_requests.yml
index aeb4e72c..669d7e8c 100644
--- a/.github/workflows/test_merge_requests.yml
+++ b/.github/workflows/test_merge_requests.yml
@@ -15,7 +15,7 @@ jobs:
     runs-on: ubuntu-20.04
     steps:
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@v2.3.4
         with:
           submodules: recursive
       - name: Build image locally