diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index acdb221..3de5c31 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -12,7 +12,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v1
+        uses: actions/checkout@50fbc622fc4ef5163becd7fab6573eac35f8462e # ratchet:actions/checkout@v1
       - name: Build and Test
         run: swift test
 
@@ -32,6 +32,6 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v1
+        uses: actions/checkout@50fbc622fc4ef5163becd7fab6573eac35f8462e # ratchet:actions/checkout@v1
       - name: Build and Test
         run: swift test --enable-test-discovery
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 6037162..5041ad8 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -13,15 +13,15 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # ratchet:actions/checkout@v2
 
       - name: Install Cocoapods
         run: gem install cocoapods
 
       - name: Deploy to Cocoapods
         run: |
-         set -eo pipefail
-         pod lib lint --allow-warnings
-         pod trunk push --allow-warnings
+          set -eo pipefail
+          pod lib lint --allow-warnings
+          pod trunk push --allow-warnings
         env:
           COCOAPODS_TRUNK_TOKEN: ${{ secrets.COCOAPODS_TRUNK_TOKEN }}