diff --git a/.github/workflows/manage-org.yaml b/.github/workflows/manage-org.yaml
index 8df9da7..e11a589 100644
--- a/.github/workflows/manage-org.yaml
+++ b/.github/workflows/manage-org.yaml
@@ -10,7 +10,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: checkout community repo
-      uses: actions/checkout@v4
+      uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
     - name: update org
       env:
         GH_TOK: ${{secrets.GATEWAYBOT}}