diff --git a/.github/workflows/bulwark-golicenses.yaml b/.github/workflows/bulwark-golicenses.yaml
index ef1dd87..129a114 100644
--- a/.github/workflows/bulwark-golicenses.yaml
+++ b/.github/workflows/bulwark-golicenses.yaml
@@ -16,7 +16,7 @@ jobs:
         run: sudo apt-get install -y git
 
       - name: checkout
-        uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4
+        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4
 
       - name: Set up Go
         uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7 # v5
diff --git a/.github/workflows/bulwark-gosec.yaml b/.github/workflows/bulwark-gosec.yaml
index fea9ed9..91a7c3b 100644
--- a/.github/workflows/bulwark-gosec.yaml
+++ b/.github/workflows/bulwark-gosec.yaml
@@ -23,7 +23,7 @@ jobs:
           go-version: '1.21'
 
       - name: checkout
-        uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4
+        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4
 
       - name: run-gosec-scan
         shell: sh
diff --git a/.github/workflows/bulwark-govulncheck.yaml b/.github/workflows/bulwark-govulncheck.yaml
index f47068a..692f4ee 100644
--- a/.github/workflows/bulwark-govulncheck.yaml
+++ b/.github/workflows/bulwark-govulncheck.yaml
@@ -19,7 +19,7 @@ jobs:
         run: GOBIN=/usr/local/bin go install golang.org/x/vuln/cmd/govulncheck@latest
 
       - name: checkout
-        uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4
+        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4
 
       - name: govulncheck-scan
         run: |
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index a9a5f17..ed9709e 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -27,7 +27,7 @@ jobs:
     # Release-please creates a PR that tracks all changes
     steps:
       - name: Checkout
-        uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4
+        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4
 
       - uses: google-github-actions/release-please-action@a37ac6e4f6449ce8b3f7607e4d97d0146028dc0b # v4
         id: release
@@ -43,7 +43,7 @@ jobs:
     runs-on: [self-hosted, Linux, X64, validator]
     if: needs.release-please.outputs.releases_created == 'true'
     steps:
-      - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4
+      - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4
       - name: Publish Helm chart
         uses: stefanprodan/helm-gh-pages@master
         with:
@@ -68,7 +68,7 @@ jobs:
       IMAGE_NAME: validator-plugin-maas
     steps:
       - name: Checkout
-        uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4
+        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4
         with:
           submodules: recursive
 
diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml
index ff48320..0b7f3d0 100644
--- a/.github/workflows/test.yaml
+++ b/.github/workflows/test.yaml
@@ -16,7 +16,7 @@ jobs:
     name: Run Unit Tests
     runs-on: [self-hosted, Linux, X64, validator]
     steps:
-      - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4
+      - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4
 
       - name: Set up Go
         uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7 # v5
@@ -42,7 +42,7 @@ jobs:
     runs-on: [self-hosted, Linux, X64, validator]
     if: "!(contains(github.head_ref, 'release-please') || contains(github.ref, 'release-please'))"
     steps:
-      - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4
+      - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4
         with:
           fetch-depth: 0