diff --git a/.forgejo/workflows/check.yml b/.forgejo/workflows/check.yml
index 882647e..205358f 100644
--- a/.forgejo/workflows/check.yml
+++ b/.forgejo/workflows/check.yml
@@ -3,7 +3,7 @@ jobs:
   check-renovaterc:
     runs-on: nixos
     steps:
-      - uses: https://git.salame.cl/actions/checkout@v4
+      - uses: https://git.salame.cl/actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - name: Validate renovaterc
         run: |
           nix --version
@@ -11,7 +11,7 @@ jobs:
   build:
     runs-on: nixos
     steps:
-      - uses: https://git.salame.cl/actions/checkout@v4
+      - uses: https://git.salame.cl/actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - name: Build Package
         run: |
           nix --version
@@ -31,7 +31,7 @@ jobs:
           - module-ipv4-only-test
           - module-ipv6-only-test
     steps:
-      - uses: https://git.salame.cl/actions/checkout@v4
+      - uses: https://git.salame.cl/actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - name: Check
         run: |
           set -x
@@ -42,7 +42,7 @@ jobs:
     runs-on: nixos
     needs: build
     steps:
-      - uses: https://git.salame.cl/actions/checkout@v4
+      - uses: https://git.salame.cl/actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - run: nix --version
       - name: Generate size report
         uses: https://git.salame.cl/jalil/nix-flake-outputs-size@main