diff --git a/.github/workflows/ci-publish-base-image.yml b/.github/workflows/ci-publish-base-image.yml
index bd71ea3c9235..ae5d25dc3fc9 100644
--- a/.github/workflows/ci-publish-base-image.yml
+++ b/.github/workflows/ci-publish-base-image.yml
@@ -20,7 +20,7 @@ jobs:
     env:
       DOCKERHUB_ORG: diem
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
         with:
           # This ensures that the tip of the PR is checked out instead of the merge between the base ref and the tip
           # On `push` this value will be empty and will "do-the-right-thing"
diff --git a/.github/workflows/ci-test.yml b/.github/workflows/ci-test.yml
index 33c3604d8f67..308f7208e104 100644
--- a/.github/workflows/ci-test.yml
+++ b/.github/workflows/ci-test.yml
@@ -28,7 +28,7 @@ jobs:
       test-non-rust-lint: ${{ steps.non-rust-lint-changes.outputs.changes-found }}
       test-docker-compose: ${{ steps.docker-compose-changes.outputs.changes-found }}
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
         with:
           # This ensures that the tip of the PR is checked out instead of the merge between the base ref and the tip
           # On `push` this value will be empty and will "do-the-right-thing"
@@ -83,7 +83,7 @@ jobs:
       matrix:
         target_os: [alpine, centos, arch, github]
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
         with:
           ref: ${{ github.event.pull_request.head.sha }}
       - uses: ./.github/actions/check-machine
@@ -97,7 +97,7 @@ jobs:
     needs: prepare
     if: ${{ github.event_name == 'push' && needs.prepare.outputs.test-rust == 'true' }}
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
         with:
           fetch-depth: 0 #get all the history!!!
       - id: changes
@@ -141,7 +141,7 @@ jobs:
     container:
       image: diem/build_environment:${{ needs.prepare.outputs.changes-target-branch }}
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
         with:
           ref: ${{ github.event.pull_request.head.sha }}
       - uses: ./.github/actions/build-setup
@@ -168,7 +168,7 @@ jobs:
       volumes:
         - "/home/runner/work/diem/diem:/opt/git/diem"
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
         with:
           ref: ${{ github.event.pull_request.head.sha }}
       - uses: ./.github/actions/check-machine
@@ -200,7 +200,7 @@ jobs:
       volumes:
         - "/home/runner/work/diem/diem:/opt/git/diem"
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
         with:
           ref: ${{ github.event.pull_request.head.sha }}
           fetch-depth: 0 #get all the history!!!
@@ -233,7 +233,7 @@ jobs:
       volumes:
         - "/home/runner/work/diem/diem:/opt/git/diem"
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
         with:
           ref: ${{ github.event.pull_request.head.sha }}
           fetch-depth: 0 #get all the history!!!
@@ -273,7 +273,7 @@ jobs:
       FLAKY_TESTS_FILE: /tmp/failures
       MESSAGE_PAYLOAD_FILE: /tmp/message
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
         with:
           ref: ${{ github.event.pull_request.head.sha }}
       - uses: ./.github/actions/build-setup
@@ -339,7 +339,7 @@ jobs:
     needs: prepare
     if: ${{ needs.prepare.outputs.test-docker-compose == 'true' }}
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
         with:
           ref: ${{ github.event.pull_request.head.sha }}
       - uses: ./.github/actions/check-machine
@@ -371,7 +371,7 @@ jobs:
       volumes:
         - "/home/runner/work/diem/diem:/opt/git/diem"
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
         with:
           ref: ${{ github.event.pull_request.head.sha }}
       - uses: ./.github/actions/check-machine
@@ -398,7 +398,7 @@ jobs:
     needs: prepare
     if: ${{ needs.prepare.outputs.test-helm == 'true' }}
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
         with:
           ref: ${{ github.event.pull_request.head.sha }}
       - name: Check machine details for minikube
@@ -472,7 +472,7 @@ jobs:
       volumes:
         - "/home/runner/work/diem/diem:/opt/git/diem"
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
         with:
           ref: ${{ github.event.pull_request.head.sha }}
       - uses: ./.github/actions/build-setup
@@ -495,7 +495,7 @@ jobs:
       volumes:
         - "/home/runner/work/diem/diem:/opt/git/diem"
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
         with:
           ref: ${{ github.event.pull_request.head.sha }}
       - uses: ./.github/actions/build-setup
@@ -522,7 +522,7 @@ jobs:
     env:
       CRITERION_HOME: /tmp/benches
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
         with:
           ref: ${{ github.event.pull_request.head.sha }}
       - uses: actions/cache@v2.1.4
diff --git a/.github/workflows/ci-update-sccache.yml b/.github/workflows/ci-update-sccache.yml
index 83bf80a0d1a3..628b24a3c18b 100644
--- a/.github/workflows/ci-update-sccache.yml
+++ b/.github/workflows/ci-update-sccache.yml
@@ -16,7 +16,7 @@ jobs:
   update-sccache-osx:
     runs-on: macos-latest
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
         with:
           # This ensures that the tip of the PR is checked out instead of the merge between the base ref and the tip
           # On `push` this value will be empty and will "do-the-right-thing"
diff --git a/.github/workflows/daily.yml b/.github/workflows/daily.yml
index 6b53c76391af..ecb5d07228ff 100644
--- a/.github/workflows/daily.yml
+++ b/.github/workflows/daily.yml
@@ -21,7 +21,7 @@ jobs:
     env:
       MESSAGE_PAYLOAD_FILE: /tmp/message
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
         with:
           ref: ${{ matrix.target-branch }}
       - uses: ./.github/actions/build-setup
@@ -47,7 +47,7 @@ jobs:
       CODECOV_OUTPUT: codecov
       MESSAGE_PAYLOAD_FILE: /tmp/message
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
       - uses: ./.github/actions/build-setup
       - name: Configure AWS Credentials
         uses: aws-actions/configure-aws-credentials@v1
@@ -92,7 +92,7 @@ jobs:
       SAS: ""
       CONFIG: .github/workflows/transaction-replay.toml
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
       - uses: ./.github/actions/build-setup
       - name: install azcopy
         run: |
@@ -113,7 +113,7 @@ jobs:
     env:
       TAG: github-1
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
       - name: sign in to DockerHub; install image signing cert
         uses: ./.github/actions/dockerhub_login
         with:
diff --git a/.github/workflows/dep-summaries.yml b/.github/workflows/dep-summaries.yml
index d553241c4d96..390fa0886fec 100644
--- a/.github/workflows/dep-summaries.yml
+++ b/.github/workflows/dep-summaries.yml
@@ -26,7 +26,7 @@ jobs:
       dep-auditors-list: ${{ steps.dep-auditors.outputs.list }}
     steps:
       - name: checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3
         if: ${{ startsWith(github.event_name, 'pull_request') }}
         with:
           ref: ${{ github.event.pull_request.head.sha }}
@@ -37,18 +37,18 @@ jobs:
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
       - name: checkout base ref
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3
         if: ${{ startsWith(github.event_name, 'pull_request') }}
         with:
           ref: ${{ steps.fetch-base-ref.outputs.ref }}
           path: libra-base
       - name: checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3
         if: ${{ github.event_name == 'push' }}
         with:
           ref: ${{ github.event.after }}
       - name: checkout base ref
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3
         if: ${{ github.event_name == 'push' }}
         with:
           ref: ${{ github.event.before }}
diff --git a/.github/workflows/developer-site-ci.yml b/.github/workflows/developer-site-ci.yml
index 81ff3b778f57..7cad2c64d827 100644
--- a/.github/workflows/developer-site-ci.yml
+++ b/.github/workflows/developer-site-ci.yml
@@ -19,7 +19,7 @@ jobs:
 
     steps:
     # Checks-out the Diem website repository under $GITHUB_WORKSPACE, so job can access it
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3
     # Installs node and yarn
     - name: Use Node.js 12
       uses: actions/setup-node@v2.1.5
diff --git a/.github/workflows/docker-publish.yml b/.github/workflows/docker-publish.yml
index 5a109f5a2c87..564c1cb7d900 100644
--- a/.github/workflows/docker-publish.yml
+++ b/.github/workflows/docker-publish.yml
@@ -11,7 +11,7 @@ jobs:
     env:
       TAG: github-1
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
         with:
           fetch-depth: 0 #get all the history!!!
       - id: changes
diff --git a/.github/workflows/hyperjump-comment.yml b/.github/workflows/hyperjump-comment.yml
index 82359c775f28..4ec04ee3f804 100644
--- a/.github/workflows/hyperjump-comment.yml
+++ b/.github/workflows/hyperjump-comment.yml
@@ -10,7 +10,7 @@ jobs:
     name: (hyperjump) comment
     steps:
       - name: checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3
       - name: comment
         uses: diem/actions/hyperjump-comment@faa14430e68d54a269628f385e69a207e4e413d5
         with:
diff --git a/.github/workflows/hyperjump-labels.yml b/.github/workflows/hyperjump-labels.yml
index 3bd647835081..eb60f0b300b6 100644
--- a/.github/workflows/hyperjump-labels.yml
+++ b/.github/workflows/hyperjump-labels.yml
@@ -10,7 +10,7 @@ jobs:
     name: (hyperjump) labels
     steps:
       - name: checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3
       - name: labels
         uses: diem/actions/hyperjump-labels@faa14430e68d54a269628f385e69a207e4e413d5
         with:
diff --git a/.github/workflows/hyperjump-request-review.yml b/.github/workflows/hyperjump-request-review.yml
index 7dc2fe0b2462..59b691c3afef 100644
--- a/.github/workflows/hyperjump-request-review.yml
+++ b/.github/workflows/hyperjump-request-review.yml
@@ -10,7 +10,7 @@ jobs:
     name: (hyperjump) request-review
     steps:
       - name: checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3
       - name: request review
         uses: diem/actions/hyperjump-request-review@faa14430e68d54a269628f385e69a207e4e413d5
         with:
diff --git a/.github/workflows/jsonrpc-compat.yml b/.github/workflows/jsonrpc-compat.yml
index acc25f5f5078..710920e113e4 100644
--- a/.github/workflows/jsonrpc-compat.yml
+++ b/.github/workflows/jsonrpc-compat.yml
@@ -11,7 +11,7 @@ jobs:
     name: Warn PR author about compatibility requirements
     steps:
       - name: checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3
         with:
           ref: ${{ github.event.pull_request.head.sha }}
       - name: comment
diff --git a/.github/workflows/land-blocking.yml b/.github/workflows/land-blocking.yml
index c09e2ecf203a..165fb778897f 100644
--- a/.github/workflows/land-blocking.yml
+++ b/.github/workflows/land-blocking.yml
@@ -15,7 +15,7 @@ jobs:
     # The additional time can cover the retries and wait.
     timeout-minutes: 60
     steps:
-      - uses: actions/checkout@v1
+      - uses: actions/checkout@v3
       - name: Get PR number
         id: pr-num
         uses: actions/github-script@v3
diff --git a/.github/workflows/post-land.yml b/.github/workflows/post-land.yml
index 7232bd78e4c5..833888c02a53 100644
--- a/.github/workflows/post-land.yml
+++ b/.github/workflows/post-land.yml
@@ -13,7 +13,7 @@ jobs:
     # The pre-release suite run time varies 1~1.5 hr.
     timeout-minutes: 120
     steps:
-      - uses: actions/checkout@v1
+      - uses: actions/checkout@v3
       - name: set_env
         id: set_env
         run: |
diff --git a/.github/workflows/rustdoc.yml b/.github/workflows/rustdoc.yml
index 112bfb3ee717..02567bc0bfac 100644
--- a/.github/workflows/rustdoc.yml
+++ b/.github/workflows/rustdoc.yml
@@ -14,7 +14,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3
 
       - name: Install Rust toolchain
         uses: actions-rs/toolchain@v1