diff --git a/.github/workflows/shellcheck.yml b/.github/workflows/shellcheck.yml
index 3ad9d66ef2..7dd912760c 100644
--- a/.github/workflows/shellcheck.yml
+++ b/.github/workflows/shellcheck.yml
@@ -8,7 +8,7 @@ jobs:
   shellcheck:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0
     - name: Shellcheck
       run: |
         .github/workflows/scripts/run-shellcheck.sh