diff --git a/.github/workflows/generated_files.yml b/.github/workflows/generated_files.yml
index b4d168ec..a5175348 100644
--- a/.github/workflows/generated_files.yml
+++ b/.github/workflows/generated_files.yml
@@ -17,7 +17,7 @@ jobs:
     name: Regenerate derived files
     steps:
       - name: Check out the repository to the runner
-        uses: actions/checkout@v4
+        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
       - name: Regenerate the log test data
         run: ./testdata/build_log.sh
       - name: Confirm there are no diffs