diff --git a/.github/workflows/bump.yml b/.github/workflows/bump.yml
index 3d2a9f5..41c7b00 100644
--- a/.github/workflows/bump.yml
+++ b/.github/workflows/bump.yml
@@ -12,7 +12,7 @@ jobs:
   bump:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
 
       - run: |
           echo "BUMP_DIR=$RUNNER_TEMP/bumps" >> "$GITHUB_ENV"