diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index ed29e75..7ed067f 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -13,7 +13,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Install Rust 1.75
         run: |
diff --git a/.github/workflows/clippy-rustfmt.yml b/.github/workflows/clippy-rustfmt.yml
index 6856624..ca0a0a5 100644
--- a/.github/workflows/clippy-rustfmt.yml
+++ b/.github/workflows/clippy-rustfmt.yml
@@ -16,7 +16,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Install Rust Nightly
         run: |
diff --git a/.github/workflows/license.yml b/.github/workflows/license.yml
index 919b3d0..ebb198e 100644
--- a/.github/workflows/license.yml
+++ b/.github/workflows/license.yml
@@ -14,6 +14,6 @@ jobs:
     timeout-minutes: 3
 
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - name: Check License Header
-        uses: apache/skywalking-eyes@v0.3.0
+        uses: apache/skywalking-eyes/header@61275cc80d0798a405cb070f7d3a8aaf7cf2c2c1 # v0.8.0
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index a2bcdf0..01174ee 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -13,7 +13,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Install Rust Stable
         run: |