diff --git a/.github/workflows/ioweb_prod_cd.yml b/.github/workflows/ioweb_prod_cd.yml
index 2c89f0938..0e3c861a6 100644
--- a/.github/workflows/ioweb_prod_cd.yml
+++ b/.github/workflows/ioweb_prod_cd.yml
@@ -63,6 +63,13 @@ jobs:
     environment: prod-cd
     needs: [terraform_preapply_job]
     steps:
+      - name: Checkout
+        id: checkout
+        # from https://github.com/actions/checkout/commits/main
+        uses: actions/checkout@1f9a0c22da41e6ebfa534300ef656657ea2c6707
+        with:
+          persist-credentials: false
+          fetch-depth: 0
       - name: Terraform apply common
         # from https://github.com/pagopa/terraform-apply-azure-action/commits/main
         uses: pagopa/terraform-apply-azure-action@87efc4aa9b093b99ae5fd1915977e29cd80861ab
diff --git a/.github/workflows/prod_cd_citizen-auth.yml b/.github/workflows/prod_cd_citizen-auth.yml
index 046bd1527..817ffeaf1 100644
--- a/.github/workflows/prod_cd_citizen-auth.yml
+++ b/.github/workflows/prod_cd_citizen-auth.yml
@@ -74,6 +74,13 @@ jobs:
     environment: prod-cd
     needs: [terraform_preapply_job]
     steps:
+      - name: Checkout
+        id: checkout
+        # from https://github.com/actions/checkout/commits/main
+        uses: actions/checkout@1f9a0c22da41e6ebfa534300ef656657ea2c6707
+        with:
+          persist-credentials: false
+          fetch-depth: 0
       - name: Terraform apply common
         # from https://github.com/pagopa/terraform-apply-azure-action/commits/main
         uses: pagopa/terraform-apply-azure-action@87efc4aa9b093b99ae5fd1915977e29cd80861ab