diff --git a/.github/workflows/actionlint.yml b/.github/workflows/actionlint.yml
index 4ef847a..3388ac1 100644
--- a/.github/workflows/actionlint.yml
+++ b/.github/workflows/actionlint.yml
@@ -9,7 +9,7 @@ jobs:
   actionlint:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
       - uses: reviewdog/action-actionlint@v1
         with:
           github_token: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/labeler.yml b/.github/workflows/labeler.yml
index 82cb5d1..61ed4bd 100644
--- a/.github/workflows/labeler.yml
+++ b/.github/workflows/labeler.yml
@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
 
       - name: Run Labeler
         uses: crazy-max/ghaction-github-labeler@v4
diff --git a/.github/workflows/python_check_format.yml b/.github/workflows/python_check_format.yml
index ca77e90..8ae0a0f 100644
--- a/.github/workflows/python_check_format.yml
+++ b/.github/workflows/python_check_format.yml
@@ -10,7 +10,7 @@ jobs:
   black_format:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
 
       # - name: check python format with black
       #   uses: psf/black@stable
diff --git a/.github/workflows/python_lint.yml b/.github/workflows/python_lint.yml
index e2c78d6..29807f0 100644
--- a/.github/workflows/python_lint.yml
+++ b/.github/workflows/python_lint.yml
@@ -10,7 +10,7 @@ jobs:
   flake8_lint:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
 
       - name: Set up python environment
         uses: actions/setup-python@v4
diff --git a/.github/workflows/validate-renovate.yml b/.github/workflows/validate-renovate.yml
index 84b5221..6f1477e 100644
--- a/.github/workflows/validate-renovate.yml
+++ b/.github/workflows/validate-renovate.yml
@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
       - uses: actions/setup-node@v3
 
       - name: install