diff --git a/.github/workflows/docfx-publish.yaml b/.github/workflows/docfx-publish.yaml
index 4344c2e..f0bc084 100644
--- a/.github/workflows/docfx-publish.yaml
+++ b/.github/workflows/docfx-publish.yaml
@@ -30,7 +30,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v6.0.1
 
       - name: Patch Speakeasy README docs links
         run: ./scripts/patch-readme.sh README.md ${{ env.GH_PAGES_URL }}
diff --git a/.github/workflows/manual_publish_nuget_pkg.yaml b/.github/workflows/manual_publish_nuget_pkg.yaml
index f1dd121..404ae44 100644
--- a/.github/workflows/manual_publish_nuget_pkg.yaml
+++ b/.github/workflows/manual_publish_nuget_pkg.yaml
@@ -18,7 +18,7 @@ jobs:
   manual-build-and-publish:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.1
         with:
           fetch-depth: 0 # Get all history for automatic versioning
 
diff --git a/.github/workflows/post-tag.yaml b/.github/workflows/post-tag.yaml
index 466c1b9..7af995a 100644
--- a/.github/workflows/post-tag.yaml
+++ b/.github/workflows/post-tag.yaml
@@ -21,7 +21,7 @@ jobs:
       - name: Tune GitHub-hosted runner network
         uses: smorimoto/tune-github-hosted-runner-network@v1
 
-      - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
         with:
           fetch-depth: 0 # Get all history for automatic versioning
 
@@ -58,7 +58,7 @@ jobs:
         uses: smorimoto/tune-github-hosted-runner-network@v1
 
       - name: Check out code
-        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
+        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
 
       - name: Download release binaries
         uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
@@ -81,7 +81,7 @@ jobs:
         uses: smorimoto/tune-github-hosted-runner-network@v1
 
       - name: Check out code
-        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
+        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
 
       - name: Set TAG_NAME in Environment
         # Subsequent steps will be have the computed tag name
diff --git a/.github/workflows/pull-request.yaml b/.github/workflows/pull-request.yaml
index 37118b7..1956f0d 100644
--- a/.github/workflows/pull-request.yaml
+++ b/.github/workflows/pull-request.yaml
@@ -23,7 +23,7 @@ jobs:
       - name: Tune GitHub-hosted runner network
         uses: smorimoto/tune-github-hosted-runner-network@v1
 
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.1
 
       - name: Patch Speakeasy README docs links
         run: ./scripts/patch-readme.sh README.md http://localhost:8000
@@ -40,7 +40,7 @@ jobs:
       - name: Tune GitHub-hosted runner network
         uses: smorimoto/tune-github-hosted-runner-network@v1
 
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.1
         with:
           fetch-depth: 0  # Fetch full history to access all commits
 
@@ -121,7 +121,7 @@ jobs:
       - name: Tune GitHub-hosted runner network
         uses: smorimoto/tune-github-hosted-runner-network@v1
 
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.1
 
       - name: Setup dotnet
         uses: actions/setup-dotnet@v5
@@ -141,7 +141,7 @@ jobs:
       - name: Tune GitHub-hosted runner network
         uses: smorimoto/tune-github-hosted-runner-network@v1
 
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.1
 
       - name: Setup dotnet
         uses: actions/setup-dotnet@v5