diff --git a/.github/workflows/code-check.yaml b/.github/workflows/code-check.yaml
index f94f3f9074..733129cca5 100644
--- a/.github/workflows/code-check.yaml
+++ b/.github/workflows/code-check.yaml
@@ -11,9 +11,9 @@ jobs:
 
         steps:
           - name: Checkout code
-            uses: actions/checkout@v3
+            uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
           - name: JDK 11
-            uses: actions/setup-java@v3
+            uses: actions/setup-java@17f84c3641ba7b8f6deff6309fc4c864478f5d62 # v3
             with:
               java-version: '11'
               distribution: 'temurin'
@@ -25,11 +25,11 @@ jobs:
 
         steps:
           - name: Checkout code
-            uses: actions/checkout@v3
+            uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
           - name: JDK 17
-            uses: actions/setup-java@v3
+            uses: actions/setup-java@17f84c3641ba7b8f6deff6309fc4c864478f5d62 # v3
             with:
               java-version: '17'
               distribution: 'temurin'
           - name: Run Code Checks
-            run: .build/docker/check-code.sh 17
\ No newline at end of file
+            run: .build/docker/check-code.sh 17