diff --git a/.gitea/workflows/install-yq.yaml b/.gitea/workflows/install-yq.yaml
index ed78ba5..24f8336 100644
--- a/.gitea/workflows/install-yq.yaml
+++ b/.gitea/workflows/install-yq.yaml
@@ -31,7 +31,7 @@ jobs:
           #   yq-arch: "arm64"
           #   yq-os: "darwin"
     steps:
-      - uses: actions/checkout@v7.0.0
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
       - name: Install yq
         shell: bash
         env: