diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index f1ccd110db..a121459c2a 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -9,7 +9,7 @@ jobs:
   linters:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 #v4.2.2
 
       - name: Install devbox
         uses: jetify-com/devbox-install-action@a03caf5813591bc882139eba6ae947930a83a427 #v0.11.0
diff --git a/.github/workflows/dashboards.yml b/.github/workflows/dashboards.yml
index 1e17cf975b..560d712422 100644
--- a/.github/workflows/dashboards.yml
+++ b/.github/workflows/dashboards.yml
@@ -12,7 +12,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 #v4.2.2
 
       - name: Get changed dashboards
         id: changed-files
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index c5fc840b54..9180e7fffa 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -11,11 +11,9 @@ permissions:
 name: Publish Extension
 jobs:
   publish:
-    needs: lint
-
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 #v4.2.2
 
       - name: Install devbox
         uses: jetify-com/devbox-install-action@a03caf5813591bc882139eba6ae947930a83a427 #v0.11.0