diff --git a/.gitea/workflows/release-latest.yaml b/.gitea/workflows/release-latest.yaml
index e16f689..9243b7b 100644
--- a/.gitea/workflows/release-latest.yaml
+++ b/.gitea/workflows/release-latest.yaml
@@ -9,7 +9,7 @@ jobs:
   push-arm64:
     runs-on: ubuntu-latest-arm64
     steps:
-      - uses: actions/checkout@v6.0.2
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
 
       - uses: docker/setup-qemu-action@v4.1.0
       - uses: docker/setup-buildx-action@v4.1.0
@@ -34,7 +34,7 @@ jobs:
   push-amd64:
     runs-on: ubuntu-latest-amd64
     steps:
-      - uses: actions/checkout@v6.0.2
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
 
       - uses: docker/setup-qemu-action@v4.1.0
       - uses: docker/setup-buildx-action@v4.1.0