diff --git a/.github/workflows/synth.yaml b/.github/workflows/synth.yaml
index 4242b8c..03a30eb 100644
--- a/.github/workflows/synth.yaml
+++ b/.github/workflows/synth.yaml
@@ -20,7 +20,7 @@ jobs:
       image: docker.mirror.hashicorp.services/hashicorp/jsii-terraform
     steps:
       - name: Checkout
-        uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
       - name: ensure correct user
         run: chown -R root /__w/cdktf-multistack-serverless-example/
       - name: Install dependencies