diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index a1d411dd..6d285235 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -26,7 +26,7 @@ jobs:
         java: [ '8', '11', '15' ]
         platform: ['windows-latest', 'ubuntu-latest']
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.1.0
     - name: Set up JDK ${{ matrix.java }}
       uses: actions/setup-java@v1
       with:
@@ -51,7 +51,7 @@ jobs:
         java: [ '8', '11', '15' ]
         platform: ['windows-latest', 'ubuntu-latest']
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3.1.0
       - name: Gradle wrapper validation
         uses: gradle/wrapper-validation-action@v1
       - name: Set up JDK
@@ -84,7 +84,7 @@ jobs:
       ORG_GRADLE_PROJECT_signingKey: ${{ secrets.SONATYPE_SIGNING_PRIVATE_KEY }}
       GH_PERSONAL_ACCESS_TOKEN: ${{ secrets.GH_PERSONAL_ACCESS_TOKEN }}
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3.1.0
         with:
           persist-credentials: false # without this, all access tokens set later on will be ignored
       - name: Set up JDK