diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index b3184d2..4cbcd2e 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -21,7 +21,7 @@ jobs:
     steps:
       ### GENERIC COOKIECUTTER INITIALIZATION STEPS ###
       - name: check out the codebase
-        uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3
+        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
 
       - name: set up python 3
         uses: actions/setup-python@57ded4d7d5e986d7296eab16560982c6dd7c923b # v4
diff --git a/.github/workflows/issue-label-manager.yml b/.github/workflows/issue-label-manager.yml
index 5a345f0..2a98d1a 100644
--- a/.github/workflows/issue-label-manager.yml
+++ b/.github/workflows/issue-label-manager.yml
@@ -20,7 +20,7 @@ jobs:
     name: Invoke issue-label-manager action
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
       - uses: crazy-max/ghaction-github-labeler@3de87da19416edc45c90cd89e7a4ea922a3aae5a # v4
         if: success()
         with: