diff --git a/.github/workflows/changelog.yml b/.github/workflows/changelog.yml
index e412fd48a2..3b81a24c73 100644
--- a/.github/workflows/changelog.yml
+++ b/.github/workflows/changelog.yml
@@ -13,7 +13,7 @@ jobs:
 
     steps:
       - name: "Checkout repository"
-        uses: "actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744"
+        uses: "actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac"
         with:
           # `towncrier check` runs `git diff --name-only origin/main...`, which
           # needs a non-shallow clone.
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 6f86de1308..eb5dc4173c 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -23,7 +23,7 @@ jobs:
 
     steps:
       - name: "Checkout repository"
-        uses: "actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744"
+        uses: "actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac"
 
       - name: "Setup Python"
         uses: "actions/setup-python@61a6322f88396a6271a6ee3565807d608ecaddd1"
@@ -99,7 +99,7 @@ jobs:
     timeout-minutes: 40
     steps:
       - name: "Checkout repository"
-        uses: "actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744"
+        uses: "actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac"
 
       - name: "Traefik: Prerequisites - CA, Host, Tools (Linux)"
         if: ${{ matrix.traefik-server && contains(matrix.os, 'ubuntu') }}
@@ -271,7 +271,7 @@ jobs:
     needs: test
     steps:
       - name: "Checkout repository"
-        uses: "actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744"
+        uses: "actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac"
 
       - name: "Setup Python"
         uses: "actions/setup-python@61a6322f88396a6271a6ee3565807d608ecaddd1"
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 381e4e5fc5..023a377de5 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -20,7 +20,7 @@ jobs:
       security-events: write
     steps:
     - name: "Checkout repository"
-      uses: "actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744"
+      uses: "actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac"
 
     - name: "Run CodeQL init"
       uses: "github/codeql-action/init@cdcdbb579706841c47f7063dda365e292e5cad7a"
diff --git a/.github/workflows/integration.yml b/.github/workflows/integration.yml
index a0a79058db..349f00089e 100644
--- a/.github/workflows/integration.yml
+++ b/.github/workflows/integration.yml
@@ -19,7 +19,7 @@ jobs:
 
     steps:
       - name: "Checkout repository"
-        uses: "actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744"
+        uses: "actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac"
 
       - name: "Setup Python"
         uses: "actions/setup-python@61a6322f88396a6271a6ee3565807d608ecaddd1"
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index 4f35cbf9b4..63b6844d12 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -12,7 +12,7 @@ jobs:
 
     steps:
       - name: "Checkout repository"
-        uses: "actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744"
+        uses: "actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac"
 
       - name: "Setup Python"
         uses: "actions/setup-python@61a6322f88396a6271a6ee3565807d608ecaddd1"
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 3cfc45b960..eecb1e17ae 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -17,7 +17,7 @@ jobs:
 
     steps:
       - name: "Checkout repository"
-        uses: "actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744"
+        uses: "actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac"
 
       - name: "Setup Python"
         uses: "actions/setup-python@61a6322f88396a6271a6ee3565807d608ecaddd1"
diff --git a/.github/workflows/scorecards.yml b/.github/workflows/scorecards.yml
index 1496016ef0..13c9118ee9 100644
--- a/.github/workflows/scorecards.yml
+++ b/.github/workflows/scorecards.yml
@@ -21,7 +21,7 @@ jobs:
     
     steps:
       - name: "Checkout repository"
-        uses: "actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744"
+        uses: "actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac"
         with:
           persist-credentials: false