diff --git a/.github/actions/secure-checkout/action.yaml b/.github/actions/secure-checkout/action.yaml
index 30fdfa98ed..24fa33de6e 100644
--- a/.github/actions/secure-checkout/action.yaml
+++ b/.github/actions/secure-checkout/action.yaml
@@ -1,7 +1,7 @@
 name: "secure-checkout"
 description: "Checkout and verify a commit sha for a GitHub repo"
 
-input:
+inputs:
   repository:
     description: "The repository to check out."
     required: false
@@ -31,6 +31,7 @@ runs:
   using: "composite"
   steps:
     - name: Verify input sha
+      shell: bash
       env:
         EXPECTED_SHA: "${{ inputs.sha }}"
       # Verify that the input sha is a git digest (sha1).