diff --git a/ci/generator-generic-ossf-slsa3-publish.yml b/ci/generator-generic-ossf-slsa3-publish.yml
index 54c110e..feadcf2 100644
--- a/ci/generator-generic-ossf-slsa3-publish.yml
+++ b/ci/generator-generic-ossf-slsa3-publish.yml
@@ -3,10 +3,10 @@
 # separate terms of service, privacy policy, and support
 # documentation.
 
-# This workflow lets you compile your Go project using a SLSA3 compliant builder. 
-# This workflow will generate a so-called "provenance" file describing the steps 
+# This workflow lets you compile your Go project using a SLSA3 compliant builder 
+# This workflow will generate a so-called "provenance" file describing the steps
 # that were performed to generate the final binary.
-# The project is an initiative of the OpenSSF (openssf.org) and is developed at 
+# The project is an initiative of the OpenSSF (openssf.org) and is developed at
 # https://github.com/slsa-framework/slsa-github-generator.
 # The provenance file can be verified using https://github.com/slsa-framework/slsa-verifier.
 # For more information about SLSA and how it improves the supply-chain, visit slsa.dev.
@@ -26,11 +26,13 @@ jobs:
       digests: ${{ steps.hash.outputs.digests }}
 
     steps:
+      uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3
+
       # ========================================================
       #
       # Step 1: Build your artifacts.
       #
-      # ========================================================      
+      # ========================================================
       - name: Build artifacts
         run: |
             # These are some amazing artifacts.