diff --git a/.github/workflows/build-images-release.yaml b/.github/workflows/build-images-release.yaml
index 57c58ab6..4c7d9f9b 100644
--- a/.github/workflows/build-images-release.yaml
+++ b/.github/workflows/build-images-release.yaml
@@ -43,7 +43,7 @@ jobs:
           echo ::set-output name=tag::${GITHUB_REF##*/}
 
       - name: Checkout Source Code
-        uses: actions/checkout@5a4ac9002d0be2fb38bd78e4b4dbde5606d7042f
+        uses: actions/checkout@1e204e9a9253d643386038d443f96446fa156a97
         with:
           persist-credentials: false
 
diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index d7415744..ab079530 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -13,7 +13,7 @@ jobs:
         with:
           go-version: 1.17.1
       - name: Checkout code
-        uses: actions/checkout@v2
+        uses: actions/checkout@1e204e9a9253d643386038d443f96446fa156a97
         with:
           path: src/github.com/cilium/certgen
       - name: Formatting check