diff --git a/.github/workflows/charts-release.yaml b/.github/workflows/charts-release.yaml
index 8d5ed922bc3..54d48ebdae6 100644
--- a/.github/workflows/charts-release.yaml
+++ b/.github/workflows/charts-release.yaml
@@ -177,7 +177,7 @@ jobs:
 
       - name: Checkout website repo
         if: github.event_name == 'push'
-        uses: actions/checkout@v3
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
         with:
           repository: trueforge-org/website
           path: website   # checkout into ./website