diff --git a/.github/workflows/actionlint.yml b/.github/workflows/actionlint.yml
index 5c765df95be..771faa45778 100644
--- a/.github/workflows/actionlint.yml
+++ b/.github/workflows/actionlint.yml
@@ -6,7 +6,7 @@ jobs:
   actionlint:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.2
         with:
           show-progress: false
       - uses: alphagov/govuk-infrastructure/.github/actions/actionlint@main
diff --git a/.github/workflows/copy-pr-template-to-dependabot-prs.yml b/.github/workflows/copy-pr-template-to-dependabot-prs.yml
index a92745eaa31..6507ff9cd8c 100644
--- a/.github/workflows/copy-pr-template-to-dependabot-prs.yml
+++ b/.github/workflows/copy-pr-template-to-dependabot-prs.yml
@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-latest
     if: github.actor == 'dependabot[bot]'
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.2
 
       - name: Post PR template as a comment
         uses: actions/github-script@v9
diff --git a/.github/workflows/cucumber.yml b/.github/workflows/cucumber.yml
index a970609ed90..e7538606d43 100644
--- a/.github/workflows/cucumber.yml
+++ b/.github/workflows/cucumber.yml
@@ -35,7 +35,7 @@ jobs:
         uses: alphagov/govuk-infrastructure/.github/actions/setup-redis@main
 
       - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v6.0.2
         with:
           show-progress: false
 
diff --git a/.github/workflows/flog.yml b/.github/workflows/flog.yml
index a9966cac6e1..ee2a9f36466 100644
--- a/.github/workflows/flog.yml
+++ b/.github/workflows/flog.yml
@@ -8,7 +8,7 @@ jobs:
   flog:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.2
 
       - uses: ruby/setup-ruby@v1
         with:
diff --git a/.github/workflows/linterb.yml b/.github/workflows/linterb.yml
index 14c702d2670..7c2110d933b 100644
--- a/.github/workflows/linterb.yml
+++ b/.github/workflows/linterb.yml
@@ -8,7 +8,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v6.0.2
 
       - name: Setup Ruby
         uses: ruby/setup-ruby@v1
diff --git a/.github/workflows/lintjs.yml b/.github/workflows/lintjs.yml
index 2825ea78549..7bc5bae6fc9 100644
--- a/.github/workflows/lintjs.yml
+++ b/.github/workflows/lintjs.yml
@@ -8,7 +8,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v6.0.2
 
       - name: Setup Node
         uses: alphagov/govuk-infrastructure/.github/actions/setup-node@main
diff --git a/.github/workflows/lintprettier.yml b/.github/workflows/lintprettier.yml
index 93fc0607d2d..d8530e78145 100644
--- a/.github/workflows/lintprettier.yml
+++ b/.github/workflows/lintprettier.yml
@@ -8,7 +8,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v6.0.2
 
       - name: Setup Node
         uses: alphagov/govuk-infrastructure/.github/actions/setup-node@main
diff --git a/.github/workflows/lintscss.yml b/.github/workflows/lintscss.yml
index ebeefbd2241..55a263d0bd6 100644
--- a/.github/workflows/lintscss.yml
+++ b/.github/workflows/lintscss.yml
@@ -8,7 +8,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v6.0.2
 
       - name: Setup Node
         uses: alphagov/govuk-infrastructure/.github/actions/setup-node@main
diff --git a/.github/workflows/minitest.yml b/.github/workflows/minitest.yml
index 5d368658c30..612e3f7910e 100644
--- a/.github/workflows/minitest.yml
+++ b/.github/workflows/minitest.yml
@@ -52,14 +52,14 @@ jobs:
         uses: alphagov/govuk-infrastructure/.github/actions/setup-redis@main
 
       - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v6.0.2
         with:
           repository: alphagov/whitehall
           ref: ${{ inputs.ref || github.ref }}
           show-progress: false
 
       - name: Checkout Publishing API (for Content Schemas)
-        uses: actions/checkout@v6
+        uses: actions/checkout@v6.0.2
         with:
           repository: alphagov/publishing-api
           ref: ${{ inputs.publishingApiRef }}