diff --git a/.github/workflows/docker-image.yml b/.github/workflows/docker-image.yml
index 51e939dae76..7e282ebe929 100644
--- a/.github/workflows/docker-image.yml
+++ b/.github/workflows/docker-image.yml
@@ -15,7 +15,7 @@ jobs:
       cancel-in-progress: true
     steps:
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@v2.3.5
       - name: Login to Docker Hub
         uses: docker/login-action@v1
         with:
diff --git a/.github/workflows/license.yml b/.github/workflows/license.yml
index 775b57e4f85..251ca72f0c3 100644
--- a/.github/workflows/license.yml
+++ b/.github/workflows/license.yml
@@ -31,7 +31,7 @@ jobs:
     name: License
     runs-on: ubuntu-20.04
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v2.3.5
       - name: Setup JDK 8
         uses: actions/setup-java@v2
         with:
diff --git a/.github/workflows/master.yml b/.github/workflows/master.yml
index 7e70e78843a..272ec2604f6 100644
--- a/.github/workflows/master.yml
+++ b/.github/workflows/master.yml
@@ -44,7 +44,7 @@ jobs:
     env:
       SPARK_LOCAL_IP: localhost
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v2.3.5
       - name: Setup JDK ${{ matrix.java }}
         uses: actions/setup-java@v2
         with:
@@ -100,7 +100,7 @@ jobs:
     env:
       SPARK_LOCAL_IP: localhost
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v2.3.5
       - name: Setup JDK 8
         uses: actions/setup-java@v2
         with:
@@ -143,7 +143,7 @@ jobs:
     runs-on: ubuntu-20.04
     steps:
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@v2.3.5
       # https://github.com/docker/build-push-action
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v1
diff --git a/.github/workflows/nightly.yml b/.github/workflows/nightly.yml
index d44ab6eec9c..3dd33c07c1e 100644
--- a/.github/workflows/nightly.yml
+++ b/.github/workflows/nightly.yml
@@ -15,7 +15,7 @@ jobs:
     env:
       SPARK_LOCAL_IP: localhost
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v2.3.5
       - name: Setup JDK 8
         uses: actions/setup-java@v2
         with:
diff --git a/.github/workflows/publish-snapshot.yml b/.github/workflows/publish-snapshot.yml
index 9667b894036..46c030a2e8c 100644
--- a/.github/workflows/publish-snapshot.yml
+++ b/.github/workflows/publish-snapshot.yml
@@ -16,7 +16,7 @@ jobs:
           - branch-1.3
     steps:
     - name: Checkout repository
-      uses: actions/checkout@master
+      uses: actions/checkout@2.3.5
       with:
         ref: ${{ matrix.branch }}
     - name: Cache Maven local repository
diff --git a/.github/workflows/style.yml b/.github/workflows/style.yml
index a7ef80fa313..b526bb66e1b 100644
--- a/.github/workflows/style.yml
+++ b/.github/workflows/style.yml
@@ -31,7 +31,7 @@ jobs:
     name: Style and Dep check
     runs-on: ubuntu-20.04
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v2.3.5
       - name: Setup JDK 8
         uses: actions/setup-java@v2
         with: