diff --git a/.github/workflows/check-dist.yml b/.github/workflows/check-dist.yml
index 22f014c..da6c8c1 100644
--- a/.github/workflows/check-dist.yml
+++ b/.github/workflows/check-dist.yml
@@ -21,7 +21,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
 
       - name: Set Node.js 16.x
         uses: actions/setup-node@v3
diff --git a/.github/workflows/tag.yaml b/.github/workflows/tag.yaml
index c7c2bdc..03f40d7 100644
--- a/.github/workflows/tag.yaml
+++ b/.github/workflows/tag.yaml
@@ -7,7 +7,7 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
       - name: Bump version and push tag
         id: tag_version
         uses: mathieudutour/github-tag-action@v6.0
diff --git a/.github/workflows/test-action.yml b/.github/workflows/test-action.yml
index ae13a2a..598925c 100644
--- a/.github/workflows/test-action.yml
+++ b/.github/workflows/test-action.yml
@@ -10,7 +10,7 @@ jobs:
   action:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
       - name: Get commit sha
         run: |
           echo "GITHUB_SHA=${GITHUB_SHA}" >> $GITHUB_ENV
diff --git a/.github/workflows/test-build.yml b/.github/workflows/test-build.yml
index ac9a1d5..752d553 100644
--- a/.github/workflows/test-build.yml
+++ b/.github/workflows/test-build.yml
@@ -10,7 +10,7 @@ jobs:
   build: # make sure build/ci work properly
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
       - run: |
           yarn
       - run: |
diff --git a/example/package.json b/example/package.json
index 7da4157..ee10105 100644
--- a/example/package.json
+++ b/example/package.json
@@ -1,5 +1,5 @@
 {
-  "name": "@maxgfr/example-c91f4973a570c0ed6b0867e49372f5e9f1063ca8",
+  "name": "@maxgfr/example-fd36c906e4594e7e0fd4a8a84bd1b13813ee6e85",
   "version": "1.0.0",
   "description": "",
   "main": "index.js",