diff --git a/.gitea/workflows/ci.yaml b/.gitea/workflows/ci.yaml
index f82121e..76900e9 100644
--- a/.gitea/workflows/ci.yaml
+++ b/.gitea/workflows/ci.yaml
@@ -7,7 +7,7 @@ jobs:
   test-setup-trivy:
     strategy:
       matrix:
-        arch: [ amd64, arm64 ]
+        arch: [amd64, arm64]
     name: Test Setup Trivy ${{ matrix.arch }}
     runs-on:
       - ubuntu-latest
@@ -88,7 +88,7 @@ jobs:
     runs-on:
       - ubuntu-latest
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
       - name: Merge SARIF Files
         uses: ./merge-sarif-files
         with: