diff --git a/.gitea/workflows/changelog.yml b/.gitea/workflows/changelog.yml
index 9e8d958..d6d70d1 100644
--- a/.gitea/workflows/changelog.yml
+++ b/.gitea/workflows/changelog.yml
@@ -13,7 +13,7 @@ jobs:
       - name: install tools
         run: |
           apk add -q --update --no-cache nodejs curl jq sed
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v5.0.0
         with:
           fetch-depth: 0
       - name: Generate upcoming changelog
diff --git a/.gitea/workflows/commitlint.yml b/.gitea/workflows/commitlint.yml
index 64570d5..dcf6ade 100644
--- a/.gitea/workflows/commitlint.yml
+++ b/.gitea/workflows/commitlint.yml
@@ -11,7 +11,7 @@ jobs:
     name: Execute commitlint
     runs-on: docker.io/ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v5.0.0
       - name: Check PR title
         run: |
           echo "${{ gitea.event.pull_request.title }}" | commitlint --config .commitlintrc.json
diff --git a/.gitea/workflows/release-version.yml b/.gitea/workflows/release-version.yml
index bc6bd96..acbcafa 100644
--- a/.gitea/workflows/release-version.yml
+++ b/.gitea/workflows/release-version.yml
@@ -9,7 +9,7 @@ jobs:
   generate-chart-publish:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v5.0.0
         with:
           fetch-depth: 0
 
@@ -104,7 +104,7 @@ jobs:
       - name: install tools
         run: |
           apk add -q --update --no-cache nodejs
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v5.0.0
         with:
           fetch-tags: true
           fetch-depth: 0