diff --git a/.github/workflows/collaboration-webhook-notifications.yml b/.github/workflows/collaboration-webhook-notifications.yml
index c310408..b1c8c78 100644
--- a/.github/workflows/collaboration-webhook-notifications.yml
+++ b/.github/workflows/collaboration-webhook-notifications.yml
@@ -28,7 +28,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
 
       - name: Setup Node.js
         uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020
diff --git a/.github/workflows/docs-publish.yml b/.github/workflows/docs-publish.yml
index f4e1edc..dbc6f69 100644
--- a/.github/workflows/docs-publish.yml
+++ b/.github/workflows/docs-publish.yml
@@ -27,7 +27,7 @@ jobs:
       VAULT_ADDR: ${{ secrets.VAULT_ADDR }}
       VAULT_CA_CERT_PEM: ${{ secrets.VAULT_CA_CERT_PEM }}
     steps:
-      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
         with:
           submodules: recursive
           # Use a PAT for private submodules when available; fall back to repo token.
diff --git a/.github/workflows/supply-chain-security.yml b/.github/workflows/supply-chain-security.yml
index d286036..12a650c 100644
--- a/.github/workflows/supply-chain-security.yml
+++ b/.github/workflows/supply-chain-security.yml
@@ -21,7 +21,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
 
       - name: Setup Node 20
         uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020