diff --git a/.github/workflows/build-and-publish.yaml b/.github/workflows/build-and-publish.yaml
index f47d0b123..7ec8e1350 100644
--- a/.github/workflows/build-and-publish.yaml
+++ b/.github/workflows/build-and-publish.yaml
@@ -29,7 +29,7 @@ jobs:
     if: ${{ needs.build-and-publish.result == 'success' }}
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v6.0.2
 
       - name: Download aggregated Javadoc artifact
         uses: actions/download-artifact@v8
@@ -66,7 +66,7 @@ jobs:
     needs: extract-javadoc
     if: ${{ needs.extract-javadoc.result == 'success' }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.2
 
       - name: Set up Python
         uses: actions/setup-python@v6
@@ -92,7 +92,7 @@ jobs:
     permissions:
       contents: write # Explicitly grant write access to allow pushing in this job for dependabot
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.2
         with:
           fetch-depth: 0 # Fetch all tags; Required for doc versioning