diff --git a/.github/workflows/docker-compose-community.yml b/.github/workflows/docker-compose-community.yml
index 4e5adfff6..ce1fa0953 100644
--- a/.github/workflows/docker-compose-community.yml
+++ b/.github/workflows/docker-compose-community.yml
@@ -21,6 +21,7 @@ jobs:
     name: Docker Compose community
     runs-on: ubuntu-latest
     steps:
+      - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938  # v4.2.0
       - uses: >-
           Alfresco/alfresco-build-tools/.github/actions/dbp-charts/verify-compose@v8.1.0
         with:
diff --git a/.github/workflows/docker-compose-enterprise.yml b/.github/workflows/docker-compose-enterprise.yml
index ca461b056..b504cb299 100644
--- a/.github/workflows/docker-compose-enterprise.yml
+++ b/.github/workflows/docker-compose-enterprise.yml
@@ -53,6 +53,7 @@ jobs:
         && github.event.pull_request.head.user.login == 'Alfresco'
       )
     steps:
+      - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938  # v4.2.0
       - name: Verify docker-compose
         uses: >-
           Alfresco/alfresco-build-tools/.github/actions/dbp-charts/verify-compose@v8.1.0