diff --git a/.github/workflows/.dco.yml b/.github/workflows/.dco.yml
index b72d0de152..87404d47de 100644
--- a/.github/workflows/.dco.yml
+++ b/.github/workflows/.dco.yml
@@ -25,7 +25,7 @@ jobs:
     steps:
       -
         name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
         with:
           fetch-depth: 0
       -
diff --git a/.github/workflows/.test-prepare.yml b/.github/workflows/.test-prepare.yml
index 0f04e65ef5..21b42d0b2e 100644
--- a/.github/workflows/.test-prepare.yml
+++ b/.github/workflows/.test-prepare.yml
@@ -28,7 +28,7 @@ jobs:
     steps:
       -
         name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
       -
         name: Create matrix
         id: set
diff --git a/.github/workflows/.test.yml b/.github/workflows/.test.yml
index 48845714a4..d7bd295c65 100644
--- a/.github/workflows/.test.yml
+++ b/.github/workflows/.test.yml
@@ -37,7 +37,7 @@ jobs:
     steps:
       -
         name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
       -
         name: Set up runner
         uses: ./.github/actions/setup-runner
@@ -135,7 +135,7 @@ jobs:
     steps:
       -
         name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
       -
         name: Set up runner
         uses: ./.github/actions/setup-runner
@@ -188,7 +188,7 @@ jobs:
     steps:
       -
         name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
       -
         name: Set up runner
         uses: ./.github/actions/setup-runner
@@ -231,7 +231,7 @@ jobs:
     steps:
       -
         name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
       -
         name: Set up runner
         uses: ./.github/actions/setup-runner
@@ -349,7 +349,7 @@ jobs:
     steps:
       -
         name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
       -
         name: Set up Go
         uses: actions/setup-go@v5
@@ -389,7 +389,7 @@ jobs:
     steps:
       -
         name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
       -
         name: Set up runner
         uses: ./.github/actions/setup-runner
diff --git a/.github/workflows/.windows.yml b/.github/workflows/.windows.yml
index 1c4d93e226..ad0ba03059 100644
--- a/.github/workflows/.windows.yml
+++ b/.github/workflows/.windows.yml
@@ -53,7 +53,7 @@ jobs:
     steps:
       -
         name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
         with:
           path: ${{ env.GOPATH }}/src/github.com/docker/docker
       -
@@ -132,7 +132,7 @@ jobs:
     steps:
       -
         name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
         with:
           path: ${{ env.GOPATH }}/src/github.com/docker/docker
       -
@@ -237,7 +237,7 @@ jobs:
     steps:
       -
         name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
       -
         name: Set up Go
         uses: actions/setup-go@v5
@@ -292,7 +292,7 @@ jobs:
     steps:
       -
         name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
         with:
           path: ${{ env.GOPATH }}/src/github.com/docker/docker
       -
diff --git a/.github/workflows/arm64.yml b/.github/workflows/arm64.yml
index 1f8c3917d9..2079d6daae 100644
--- a/.github/workflows/arm64.yml
+++ b/.github/workflows/arm64.yml
@@ -97,7 +97,7 @@ jobs:
     steps:
       -
         name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
       -
         name: Set up runner
         uses: ./.github/actions/setup-runner
@@ -183,7 +183,7 @@ jobs:
     steps:
       -
         name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
       -
         name: Set up runner
         uses: ./.github/actions/setup-runner
diff --git a/.github/workflows/bin-image.yml b/.github/workflows/bin-image.yml
index 4ab8b70f5d..3687ed7d4f 100644
--- a/.github/workflows/bin-image.yml
+++ b/.github/workflows/bin-image.yml
@@ -44,7 +44,7 @@ jobs:
     steps:
       -
         name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
       -
         name: Docker meta
         id: meta
@@ -103,7 +103,7 @@ jobs:
     steps:
       -
         name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
         with:
           fetch-depth: 0
       -
diff --git a/.github/workflows/buildkit.yml b/.github/workflows/buildkit.yml
index fbebce6986..642d6ec42f 100644
--- a/.github/workflows/buildkit.yml
+++ b/.github/workflows/buildkit.yml
@@ -89,7 +89,7 @@ jobs:
         uses: crazy-max/ghaction-github-runtime@v3
       -
         name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
         with:
           path: moby
       -
@@ -107,7 +107,7 @@ jobs:
         working-directory: moby
       -
         name: Checkout BuildKit ${{ env.BUILDKIT_REF }}
-        uses: actions/checkout@v4
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
         with:
           repository: ${{ env.BUILDKIT_REPO }}
           ref: ${{ env.BUILDKIT_REF }}
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index d3408ad482..33cbca6481 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -67,7 +67,7 @@ jobs:
     steps:
       -
         name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
       -
         name: Create matrix
         id: platforms
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index da7a31f09d..494ebe0296 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -87,7 +87,7 @@ jobs:
     steps:
       -
         name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
       -
         name: Create matrix
         id: scripts
@@ -112,7 +112,7 @@ jobs:
     steps:
       -
         name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
         with:
           fetch-depth: 0
       -
@@ -143,7 +143,7 @@ jobs:
     steps:
       -
         name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
       -
         name: Create matrix
         id: platforms