diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index 5c892ba..5588add 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -24,7 +24,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@5a4ac9002d0be2fb38bd78e4b4dbde5606d7042f
+        uses: actions/checkout@a12a3943b4bdde767164f792f33f40b04645d846
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
diff --git a/.github/workflows/continuous-integration-workflow.yml b/.github/workflows/continuous-integration-workflow.yml
index ed77db7..6ca56a6 100644
--- a/.github/workflows/continuous-integration-workflow.yml
+++ b/.github/workflows/continuous-integration-workflow.yml
@@ -38,7 +38,7 @@ jobs:
           --health-retries 5
     steps:
       - name: Checkout the repo
-        uses: actions/checkout@v2
+        uses: actions/checkout@a12a3943b4bdde767164f792f33f40b04645d846
       - name: Set up Postgres user
         uses: docker://postgres
         with:
@@ -98,7 +98,7 @@ jobs:
       EXPLORER_DOCKER_TAG: ${{ fromJSON('["latest", "develop"]')[github.ref == 'refs/heads/master'] }} # https://github.community/t/do-expressions-support-ternary-operators-to-change-their-returned-value/18114/4
     steps:
       - name: Checkout the repo
-        uses: actions/checkout@v2
+        uses: actions/checkout@a12a3943b4bdde767164f792f33f40b04645d846
       # Login to dockerhub so that we don't get rate limited
       - name: Login to DockerHub
         uses: docker/login-action@v1
@@ -129,7 +129,7 @@ jobs:
         password: ${{ secrets.DOCKER_READONLY_PASSWORD }}
     steps:
       - name: Checkout the repo
-        uses: actions/checkout@v2
+        uses: actions/checkout@a12a3943b4bdde767164f792f33f40b04645d846
       - name: Yarn cache
         uses: actions/cache@v2
         env:
@@ -154,7 +154,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout the repo
-        uses: actions/checkout@v2
+        uses: actions/checkout@a12a3943b4bdde767164f792f33f40b04645d846
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v1
       # Login to dockerhub so that we don't get rate limited
diff --git a/.github/workflows/dependency-check.yml b/.github/workflows/dependency-check.yml
index c2699a8..a5091bf 100644
--- a/.github/workflows/dependency-check.yml
+++ b/.github/workflows/dependency-check.yml
@@ -6,7 +6,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check out code
-        uses: actions/checkout@v2
+        uses: actions/checkout@a12a3943b4bdde767164f792f33f40b04645d846
 
       - name: Set up Go
         uses: actions/setup-go@v2
diff --git a/.github/workflows/golangci-lint.yml b/.github/workflows/golangci-lint.yml
index 6cd090b..462fb6b 100644
--- a/.github/workflows/golangci-lint.yml
+++ b/.github/workflows/golangci-lint.yml
@@ -5,7 +5,7 @@ jobs:
     name: lint
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@a12a3943b4bdde767164f792f33f40b04645d846
       - name: golangci-lint
         uses: golangci/golangci-lint-action@v2
         with:
diff --git a/.github/workflows/operator-ui.yml b/.github/workflows/operator-ui.yml
index c668b63..c5f7799 100644
--- a/.github/workflows/operator-ui.yml
+++ b/.github/workflows/operator-ui.yml
@@ -10,7 +10,7 @@ jobs:
         with:
           node-version: '12'
       - name: Checkout the repo
-        uses: actions/checkout@v2
+        uses: actions/checkout@a12a3943b4bdde767164f792f33f40b04645d846
       - name: Cache dependencies
         uses: actions/cache@v2
         env:
@@ -38,7 +38,7 @@ jobs:
         with:
           node-version: '12'
       - name: Checkout the repo
-        uses: actions/checkout@v2
+        uses: actions/checkout@a12a3943b4bdde767164f792f33f40b04645d846
       - name: Cache dependencies
         uses: actions/cache@v2
         env:
@@ -66,7 +66,7 @@ jobs:
         with:
           node-version: '12'
       - name: Checkout the repo
-        uses: actions/checkout@v2
+        uses: actions/checkout@a12a3943b4bdde767164f792f33f40b04645d846
       - name: Cache dependencies
         uses: actions/cache@v2
         env:
diff --git a/.github/workflows/solidity.yml b/.github/workflows/solidity.yml
index 9671362..9223292 100644
--- a/.github/workflows/solidity.yml
+++ b/.github/workflows/solidity.yml
@@ -10,7 +10,7 @@ jobs:
         with:
           node-version: '12'
       - name: Checkout the repo
-        uses: actions/checkout@v2
+        uses: actions/checkout@a12a3943b4bdde767164f792f33f40b04645d846
       - name: Yarn cache
         uses: actions/cache@v2
         env:
@@ -38,7 +38,7 @@ jobs:
         with:
           node-version: '12'
       - name: Checkout the repo
-        uses: actions/checkout@v2
+        uses: actions/checkout@a12a3943b4bdde767164f792f33f40b04645d846
       - name: Yarn cache
         uses: actions/cache@v2
         env:
diff --git a/.github/workflows/sync-develop-from-smartcontractkit-chainlink.yml b/.github/workflows/sync-develop-from-smartcontractkit-chainlink.yml
index 8683629..20ff2d6 100644
--- a/.github/workflows/sync-develop-from-smartcontractkit-chainlink.yml
+++ b/.github/workflows/sync-develop-from-smartcontractkit-chainlink.yml
@@ -10,7 +10,7 @@ jobs:
     name: Sync
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@a12a3943b4bdde767164f792f33f40b04645d846
         with:
           ref: develop
         if: env.GITHUB_REPOSITORY != 'smartcontractkit/plugin'