diff --git a/.github/workflows/validate.yml b/.github/workflows/validate.yml
index 84e44ef..7dfe393 100644
--- a/.github/workflows/validate.yml
+++ b/.github/workflows/validate.yml
@@ -22,7 +22,7 @@ jobs:
     name: rivet validate + artifact-driven verification gate
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v7
+      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
 
       - name: Install rivet
         run: |