diff --git a/.github/workflows/appbuild.yml b/.github/workflows/appbuild.yml
index b110c0be1..2faa8430a 100644
--- a/.github/workflows/appbuild.yml
+++ b/.github/workflows/appbuild.yml
@@ -12,7 +12,7 @@ jobs:
         node-version: [14.x]
 
     steps:
-    - uses: actions/checkout@v1
+    - uses: actions/checkout@v2.3.4
     - name: Use Node.js ${{ matrix.node-version }}
       uses: actions/setup-node@v1
       with:
diff --git a/.github/workflows/integration.yml b/.github/workflows/integration.yml
index 473a8bd7c..c5329c83d 100644
--- a/.github/workflows/integration.yml
+++ b/.github/workflows/integration.yml
@@ -43,7 +43,7 @@ jobs:
 
     steps:
       - name: Checkout server
-        uses: actions/checkout@v2
+        uses: actions/checkout@v2.3.4
         with:
           repository: nextcloud/server
           ref: ${{ matrix.server-versions }}
@@ -56,7 +56,7 @@ jobs:
           git -c "http.extraheader=$auth_header" -c protocol.version=2 submodule update --init --force --recursive --depth=1
 
       - name: Checkout app
-        uses: actions/checkout@v2
+        uses: actions/checkout@v2.3.4
         with:
           path: apps/${{ env.APP_NAME }}
 
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index 0ce257099..b3c7555b9 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -17,7 +17,7 @@ jobs:
 
     name: php${{ matrix.php-versions }} lint
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v2.3.4
       - name: Set up php${{ matrix.php-versions }}
         uses: shivammathur/setup-php@2.11.0
         with:
@@ -31,7 +31,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Checkout
-      uses: actions/checkout@master
+      uses: actions/checkout@v2.3.4
     - name: Set up php
       uses: shivammathur/setup-php@2.11.0
       with:
@@ -50,7 +50,7 @@ jobs:
         node-version: [14.x]
 
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v2.3.4
       - name: Use node ${{ matrix.node-version }}
         uses: actions/setup-node@v1
         with:
@@ -71,7 +71,7 @@ jobs:
 
     name: stylelint node${{ matrix.node-versions }}
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v2.3.4
 
       - name: Set up node ${{ matrix.node-versions }}
         uses: actions/setup-node@v1
diff --git a/.github/workflows/nightly.yml b/.github/workflows/nightly.yml
index 52be084a5..c523ac298 100644
--- a/.github/workflows/nightly.yml
+++ b/.github/workflows/nightly.yml
@@ -17,7 +17,7 @@ jobs:
         node-version: [14.x]
 
     steps:
-    - uses: actions/checkout@v1
+    - uses: actions/checkout@v2.3.4
     - name: Use Node.js ${{ matrix.node-version }}
       uses: actions/setup-node@v1
       with:
diff --git a/.github/workflows/nodejs.yml b/.github/workflows/nodejs.yml
index 0634e847e..736daf0a8 100644
--- a/.github/workflows/nodejs.yml
+++ b/.github/workflows/nodejs.yml
@@ -12,7 +12,7 @@ jobs:
         node-version: [14.x]
 
     steps:
-    - uses: actions/checkout@v1
+    - uses: actions/checkout@v2.3.4
     - name: Use Node.js ${{ matrix.node-version }}
       uses: actions/setup-node@v1
       with:
diff --git a/.github/workflows/phpunit.yml b/.github/workflows/phpunit.yml
index da38b5164..2c4ea1ed2 100644
--- a/.github/workflows/phpunit.yml
+++ b/.github/workflows/phpunit.yml
@@ -44,7 +44,7 @@ jobs:
 
     steps:
       - name: Checkout server
-        uses: actions/checkout@v2
+        uses: actions/checkout@v2.3.4
         with:
           repository: nextcloud/server
           ref: ${{ matrix.server-versions }}
@@ -57,7 +57,7 @@ jobs:
           git -c "http.extraheader=$auth_header" -c protocol.version=2 submodule update --init --force --recursive --depth=1
 
       - name: Checkout app
-        uses: actions/checkout@v2
+        uses: actions/checkout@v2.3.4
         with:
           path: apps/${{ env.APP_NAME }}
 
diff --git a/.github/workflows/static-analysis.yml b/.github/workflows/static-analysis.yml
index 204ab0236..580adc8dd 100644
--- a/.github/workflows/static-analysis.yml
+++ b/.github/workflows/static-analysis.yml
@@ -16,7 +16,7 @@ jobs:
       name: Nextcloud ${{ matrix.ocp-version }}
       steps:
           - name: Checkout
-            uses: actions/checkout@master
+            uses: actions/checkout@v2.3.4
           - name: Set up php
             uses: shivammathur/setup-php@2.11.0
             with: