diff --git a/.github/workflows/cmake.yml b/.github/workflows/cmake.yml
index 6af45ec07e..ddf6c71ce1 100644
--- a/.github/workflows/cmake.yml
+++ b/.github/workflows/cmake.yml
@@ -70,7 +70,7 @@ jobs:
     steps:
     
     - name: Checkout LAPACK
-      uses: actions/checkout@v2
+      uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2
 
     - name: Use GCC-11 on MacOS
       if: ${{ matrix.os == 'macos-latest' }}
@@ -134,7 +134,7 @@ jobs:
     steps:     
     
     - name: Checkout LAPACK
-      uses: actions/checkout@v2
+      uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2
 
     - name: Configure CMake
       # Configure CMake in a 'build' subdirectory. `CMAKE_BUILD_TYPE` is only required if you are using a single-configuration generator such as make.
diff --git a/.github/workflows/makefile.yml b/.github/workflows/makefile.yml
index a7a6315979..81a39302af 100644
--- a/.github/workflows/makefile.yml
+++ b/.github/workflows/makefile.yml
@@ -55,7 +55,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Checkout LAPACK
-      uses: actions/checkout@v2
+      uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2
     - name: Set configurations
       run: |
         echo "SHELL = /bin/sh" >> make.inc
@@ -76,7 +76,7 @@ jobs:
     runs-on: macos-latest
     steps:
     - name: Checkout LAPACK
-      uses: actions/checkout@v2
+      uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2
     - name: Set configurations
       run: |
         echo "SHELL = /bin/sh" >> make.inc