diff --git a/.github/workflows/build-docker.yml b/.github/workflows/build-docker.yml
index d81b1dc..3185082 100644
--- a/.github/workflows/build-docker.yml
+++ b/.github/workflows/build-docker.yml
@@ -87,7 +87,7 @@ jobs:
     
     steps:
     - 
-      uses: actions/checkout@v6
+      uses: actions/checkout@v7
     
     - 
       name: Set up Docker Buildx
@@ -213,7 +213,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           # admin PAT to bypass the branch ruleset on the CHANGELOG/README push
           token: ${{ secrets.GIT_HUB_TOKEN }}
@@ -315,7 +315,7 @@ jobs:
     continue-on-error: true
     steps:
       - 
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
       -
         name: Update repo description
         uses: peter-evans/dockerhub-description@v5
diff --git a/.github/workflows/preview.yml b/.github/workflows/preview.yml
index 0e256ef..c230dfd 100644
--- a/.github/workflows/preview.yml
+++ b/.github/workflows/preview.yml
@@ -31,7 +31,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 45
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Set up QEMU
         uses: docker/setup-qemu-action@v3
diff --git a/.github/workflows/security-scan.yml b/.github/workflows/security-scan.yml
index 8b6000d..1456e4c 100644
--- a/.github/workflows/security-scan.yml
+++ b/.github/workflows/security-scan.yml
@@ -35,7 +35,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Build Docker image
         run: |
@@ -78,7 +78,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Run Trivy for dependency scanning
         uses: aquasecurity/trivy-action@v0.36.0
@@ -106,7 +106,7 @@ jobs:
       security-events: write
     steps:
       - name: Checkout code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
   
       - name: Initialize CodeQL
         uses: github/codeql-action/init@v4
@@ -125,7 +125,7 @@ jobs:
     if: github.event_name != 'workflow_run'
     steps:
       - name: Checkout code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           # Fetch full history for GitLeaks to scan all commits
           fetch-depth: 0
@@ -142,7 +142,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Run Semgrep (Free Community Rules)
         uses: semgrep/semgrep-action@v1
@@ -158,7 +158,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: License Check with licensee
         run: |
@@ -180,7 +180,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Build Docker image
         run: |