diff --git a/.forgejo/workflows/build.yml b/.forgejo/workflows/build.yml
index 08c1d4b..0294b8b 100644
--- a/.forgejo/workflows/build.yml
+++ b/.forgejo/workflows/build.yml
@@ -10,7 +10,7 @@ jobs:
     name: Update xbps-src template
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4
         with:
           fetch-depth: 0
           token: ${{ secrets.FORGEJO_PUSH_TOKEN }}