diff --git a/.github/workflows/terraform-quality.yml b/.github/workflows/terraform-quality.yml
index 5d5d6c8..60e956f 100644
--- a/.github/workflows/terraform-quality.yml
+++ b/.github/workflows/terraform-quality.yml
@@ -61,7 +61,8 @@ jobs:
       - name: checkout
         uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4
       - name: checkov
-        uses: bridgecrewio/checkov-action@master
+        # lock checkov image version to v3.2.340: newer version are buggy (`TypeError: int object is not subscriptable`)
+        uses: bridgecrewio/checkov-action@a2b0083e03f46abd10e1c6d3e48a896dad73499e # master
         with:
           directory: ${{ inputs.workdir }}
           framework: terraform