diff --git a/.github/workflows/distro-matrix.yml b/.github/workflows/distro-matrix.yml
index 7c910e9..f3904df 100644
--- a/.github/workflows/distro-matrix.yml
+++ b/.github/workflows/distro-matrix.yml
@@ -45,7 +45,7 @@ jobs:
           else
             dnf install -y gcc curl git python3 ca-certificates
           fi
-      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - name: Install pinned rustup, stable and MSRV toolchains
         run: |
           set -euo pipefail
diff --git a/.github/workflows/reproducibility.yml b/.github/workflows/reproducibility.yml
index da9b1f6..e58db72 100644
--- a/.github/workflows/reproducibility.yml
+++ b/.github/workflows/reproducibility.yml
@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-22.04
     timeout-minutes: 20
     steps:
-      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - name: Install stable Rust
         run: |
           rustup toolchain install stable --profile minimal
diff --git a/.github/workflows/supply-chain.yml b/.github/workflows/supply-chain.yml
index 964d5f5..38e6c60 100644
--- a/.github/workflows/supply-chain.yml
+++ b/.github/workflows/supply-chain.yml
@@ -23,7 +23,7 @@ jobs:
     runs-on: ubuntu-22.04
     timeout-minutes: 30
     steps:
-      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - name: Install stable Rust
         run: |
           rustup toolchain install stable --profile minimal