diff --git a/.gitea/workflows/ovos-compose-upstream.yml b/.gitea/workflows/ovos-compose-upstream.yml
index a6770df..281773c 100644
--- a/.gitea/workflows/ovos-compose-upstream.yml
+++ b/.gitea/workflows/ovos-compose-upstream.yml
@@ -12,7 +12,7 @@ jobs:
     steps:
       # Step 1: Checkout the repo
       - name: Checkout benedikta-ovos
-        uses: actions/checkout@v3
+        uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # v3.0.2
 
       - name: Sync compose from ovos-docker
         run: |