diff --git a/.github/workflows/release-please-gha.yml b/.github/workflows/release-please-gha.yml
index aa209009eb2..74f98c4b6e7 100644
--- a/.github/workflows/release-please-gha.yml
+++ b/.github/workflows/release-please-gha.yml
@@ -19,7 +19,7 @@ jobs:
   release:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: Generate GitHub App token
         id: app-token
diff --git a/.github/workflows/release-please.yml b/.github/workflows/release-please.yml
index af2aba43809..1f87158d86c 100644
--- a/.github/workflows/release-please.yml
+++ b/.github/workflows/release-please.yml
@@ -19,7 +19,7 @@ jobs:
   release:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: Generate GitHub App token
         id: app-token
diff --git a/.github/workflows/validatePublicAPISurface.yml b/.github/workflows/validatePublicAPISurface.yml
index 8153340b521..d8ced8e3771 100644
--- a/.github/workflows/validatePublicAPISurface.yml
+++ b/.github/workflows/validatePublicAPISurface.yml
@@ -16,7 +16,7 @@ jobs:
   validate-public-api-surface:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - uses: microsoftgraph/kiota-dom-export-diff-tool/export@main
         id: generatePatch
       - uses: microsoftgraph/kiota-dom-export-diff-tool/tool@main
diff --git a/.github/workflows/validatePullRequest.yml b/.github/workflows/validatePullRequest.yml
index 6736d4037a7..193cdbbbc5d 100644
--- a/.github/workflows/validatePullRequest.yml
+++ b/.github/workflows/validatePullRequest.yml
@@ -18,7 +18,7 @@ jobs:
     env:
       solutionName: Microsoft.Graph.sln
     steps:
-      - uses: actions/checkout@v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - name: Setup .NET
         uses: actions/setup-dotnet@v5.4.0
         with: