diff --git a/.github/workflows/draft-new-release.yml b/.github/workflows/draft-new-release.yml
index 9609dc02..f3c13068 100644
--- a/.github/workflows/draft-new-release.yml
+++ b/.github/workflows/draft-new-release.yml
@@ -12,7 +12,7 @@ jobs:
     name: "Draft a new release"
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v3.5.2
 
       - name: Normalize version
         id: normalize_version
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 7ad42f46..fb5e9814 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -12,7 +12,7 @@ jobs:
     steps:
       - name: Check out files
         if: github.event.pull_request.merged
-        uses: actions/checkout@v3
+        uses: actions/checkout@v3.5.2
         with:
           submodules: false
           lfs: false