diff --git a/.gitea/workflows/renovate.yml b/.gitea/workflows/renovate.yml
index d33e54a..dddeff6 100644
--- a/.gitea/workflows/renovate.yml
+++ b/.gitea/workflows/renovate.yml
@@ -12,7 +12,7 @@ jobs:
     runs-on: ubuntu-latest
     container: git.fossy.my.id/renovate-clanker/renovate:latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
       - run: renovate
         env:
           RENOVATE_CONFIG_FILE: ${{ gitea.workspace }}/renovate-config.js