diff --git a/.github/actions/checkout-go/action.yml b/.github/actions/checkout-go/action.yml
index afda28530b..9c78308170 100644
--- a/.github/actions/checkout-go/action.yml
+++ b/.github/actions/checkout-go/action.yml
@@ -57,7 +57,7 @@ runs:
         token: "${{ inputs.token }}"
 
     - name: Verify checkout
-      uses: slsa-framework/slsa-github-generator/.github/actions/verify-checkout@main
+      uses: slsa-framework/slsa-github-generator/.github/actions/verify-checkout@96a2f25046e2f517c49c6ab1a258a7dc0c14687a
 
     - name: Set up Go environment
       uses: actions/setup-go@268d8c0ca0432bb2cf416faae41297df9d262d7f # tag=v3.3.0