diff --git a/.github/workflows/lint.yaml b/.github/workflows/lint.yaml
index 78bb9d33..c47d8a91 100644
--- a/.github/workflows/lint.yaml
+++ b/.github/workflows/lint.yaml
@@ -8,7 +8,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c # tag=v3
     - name: Set up Python 3.9
       uses: actions/setup-python@v1
       with:
diff --git a/.github/workflows/renovate.yml b/.github/workflows/renovate.yml
index d6ed0863..0815a5f7 100644
--- a/.github/workflows/renovate.yml
+++ b/.github/workflows/renovate.yml
@@ -8,7 +8,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3.0.2
+        uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c # tag=v3.3.0
         with:
           token: ${{ secrets.BOT_TOKEN }}
       - name: Self-hosted Renovate