diff --git a/.github/workflows/ci-publish-base-image.yml b/.github/workflows/ci-publish-base-image.yml
index f93a4031dfe3..7b54d6e5f9e1 100644
--- a/.github/workflows/ci-publish-base-image.yml
+++ b/.github/workflows/ci-publish-base-image.yml
@@ -20,7 +20,7 @@ jobs:
     env:
       DOCKERHUB_ORG: diem
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
         with:
           # This ensures that the tip of the PR is checked out instead of the merge between the base ref and the tip
           # On `push` this value will be empty and will "do-the-right-thing"
diff --git a/.github/workflows/ci-test.yml b/.github/workflows/ci-test.yml
index 085d7bd10379..ac8e47083018 100644
--- a/.github/workflows/ci-test.yml
+++ b/.github/workflows/ci-test.yml
@@ -31,7 +31,7 @@ jobs:
       test-non-rust-lint: ${{ steps.non-rust-lint-changes.outputs.changes-found }}
       test-docker-compose: ${{ steps.docker-compose-changes.outputs.changes-found }}
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
         with:
           # This ensures that the tip of the PR is checked out instead of the merge between the base ref and the tip
           # On `push` this value will be empty and will "do-the-right-thing"
@@ -104,7 +104,7 @@ jobs:
       matrix:
         target_os: [alpine, centos, arch, github]
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
         with:
           ref: ${{ github.event.pull_request.head.sha }}
       - uses: ./.github/actions/check-machine
@@ -120,7 +120,7 @@ jobs:
     outputs:
       head-tag: ${{ steps.push-to-novi-ecr.outputs.head-tag }}
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
         with:
           fetch-depth: 0 #get all the history!!!
       - id: changes
@@ -421,7 +421,7 @@ jobs:
     container:
       image: diem/build_environment:${{ needs.prepare.outputs.changes-target-branch }}
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
         with:
           ref: ${{ github.event.pull_request.head.sha }}
       - uses: ./.github/actions/build-setup
@@ -448,7 +448,7 @@ jobs:
       volumes:
         - "/home/runner/work/diem/diem:/opt/git/diem"
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
         with:
           ref: ${{ github.event.pull_request.head.sha }}
       - uses: ./.github/actions/check-machine
@@ -480,7 +480,7 @@ jobs:
       volumes:
         - "/home/runner/work/diem/diem:/opt/git/diem"
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
         with:
           ref: ${{ github.event.pull_request.head.sha }}
           fetch-depth: 0 #get all the history!!!
@@ -513,7 +513,7 @@ jobs:
       volumes:
         - "/home/runner/work/diem/diem:/opt/git/diem"
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
         with:
           ref: ${{ github.event.pull_request.head.sha }}
           fetch-depth: 0 #get all the history!!!
@@ -553,7 +553,7 @@ jobs:
       FLAKY_TESTS_FILE: /tmp/failures
       MESSAGE_PAYLOAD_FILE: /tmp/message
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
         with:
           ref: ${{ github.event.pull_request.head.sha }}
       - uses: ./.github/actions/build-setup
@@ -619,7 +619,7 @@ jobs:
     needs: prepare
     if: ${{ needs.prepare.outputs.test-docker-compose == 'true' }}
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
         with:
           ref: ${{ github.event.pull_request.head.sha }}
       - uses: ./.github/actions/check-machine
@@ -651,7 +651,7 @@ jobs:
       volumes:
         - "/home/runner/work/diem/diem:/opt/git/diem"
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
         with:
           ref: ${{ github.event.pull_request.head.sha }}
       - uses: ./.github/actions/check-machine
@@ -678,7 +678,7 @@ jobs:
     needs: prepare
     if: ${{ needs.prepare.outputs.test-helm == 'true' }}
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
         with:
           ref: ${{ github.event.pull_request.head.sha }}
       - name: Check machine details for minikube
@@ -752,7 +752,7 @@ jobs:
       volumes:
         - "/home/runner/work/diem/diem:/opt/git/diem"
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
         with:
           ref: ${{ github.event.pull_request.head.sha }}
       - uses: ./.github/actions/build-setup
@@ -775,7 +775,7 @@ jobs:
       volumes:
         - "/home/runner/work/diem/diem:/opt/git/diem"
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
         with:
           ref: ${{ github.event.pull_request.head.sha }}
       - uses: ./.github/actions/build-setup
@@ -802,7 +802,7 @@ jobs:
     env:
       CRITERION_HOME: /tmp/benches
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
         with:
           ref: ${{ github.event.pull_request.head.sha }}
       - uses: actions/cache@v2.1.4
diff --git a/.github/workflows/ci-update-sccache.yml b/.github/workflows/ci-update-sccache.yml
index 67e962712e45..11fd7e3ed542 100644
--- a/.github/workflows/ci-update-sccache.yml
+++ b/.github/workflows/ci-update-sccache.yml
@@ -16,7 +16,7 @@ jobs:
   update-sccache-osx:
     runs-on: macos-latest
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
         with:
           # This ensures that the tip of the PR is checked out instead of the merge between the base ref and the tip
           # On `push` this value will be empty and will "do-the-right-thing"
diff --git a/.github/workflows/daily.yml b/.github/workflows/daily.yml
index ccaf9e6453cd..910cea047754 100644
--- a/.github/workflows/daily.yml
+++ b/.github/workflows/daily.yml
@@ -21,7 +21,7 @@ jobs:
     env:
       MESSAGE_PAYLOAD_FILE: /tmp/message
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
         with:
           ref: ${{ matrix.target-branch }}
       - uses: ./.github/actions/build-setup
@@ -48,7 +48,7 @@ jobs:
       CODECOV_OUTPUT: codecov
       MESSAGE_PAYLOAD_FILE: /tmp/message
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
       - uses: ./.github/actions/build-setup
       - name: Configure AWS Credentials
         uses: aws-actions/configure-aws-credentials@v1
@@ -93,7 +93,7 @@ jobs:
       SAS: ""
       CONFIG: .github/workflows/transaction-replay.toml
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
       - uses: ./.github/actions/build-setup
       - name: install azcopy
         run: |
@@ -125,7 +125,7 @@ jobs:
       matrix:
         release-branch: [release-1.1]
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
         with:
           ref: ${{ matrix.release-branch }}
       - uses: ./.github/actions/build-setup
@@ -146,7 +146,7 @@ jobs:
   prune-docker-images:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
       - name: sign in to DockerHub; install image signing cert
         uses: ./.github/actions/dockerhub_login
         with:
diff --git a/.github/workflows/dep-summaries.yml b/.github/workflows/dep-summaries.yml
index d553241c4d96..390fa0886fec 100644
--- a/.github/workflows/dep-summaries.yml
+++ b/.github/workflows/dep-summaries.yml
@@ -26,7 +26,7 @@ jobs:
       dep-auditors-list: ${{ steps.dep-auditors.outputs.list }}
     steps:
       - name: checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3
         if: ${{ startsWith(github.event_name, 'pull_request') }}
         with:
           ref: ${{ github.event.pull_request.head.sha }}
@@ -37,18 +37,18 @@ jobs:
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
       - name: checkout base ref
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3
         if: ${{ startsWith(github.event_name, 'pull_request') }}
         with:
           ref: ${{ steps.fetch-base-ref.outputs.ref }}
           path: libra-base
       - name: checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3
         if: ${{ github.event_name == 'push' }}
         with:
           ref: ${{ github.event.after }}
       - name: checkout base ref
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3
         if: ${{ github.event_name == 'push' }}
         with:
           ref: ${{ github.event.before }}
diff --git a/.github/workflows/developer-site-ci.yml b/.github/workflows/developer-site-ci.yml
index 69f81257ee2b..ac921f3be2a1 100644
--- a/.github/workflows/developer-site-ci.yml
+++ b/.github/workflows/developer-site-ci.yml
@@ -19,7 +19,7 @@ jobs:
 
     steps:
     # Checks-out the Diem website repository under $GITHUB_WORKSPACE, so job can access it
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3
     # Installs node and yarn
     - name: Use Node.js 12
       uses: actions/setup-node@v2.1.5
diff --git a/.github/workflows/docker-publish.yml b/.github/workflows/docker-publish.yml
index 8d2ee0beafa0..9ee675aaa2a9 100644
--- a/.github/workflows/docker-publish.yml
+++ b/.github/workflows/docker-publish.yml
@@ -11,7 +11,7 @@ jobs:
     env:
       TAG: github-1
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
         with:
           fetch-depth: 0 #get all the history!!!
       - id: changes
diff --git a/.github/workflows/hyperjump-comment.yml b/.github/workflows/hyperjump-comment.yml
index 82359c775f28..4ec04ee3f804 100644
--- a/.github/workflows/hyperjump-comment.yml
+++ b/.github/workflows/hyperjump-comment.yml
@@ -10,7 +10,7 @@ jobs:
     name: (hyperjump) comment
     steps:
       - name: checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3
       - name: comment
         uses: diem/actions/hyperjump-comment@faa14430e68d54a269628f385e69a207e4e413d5
         with:
diff --git a/.github/workflows/hyperjump-labels.yml b/.github/workflows/hyperjump-labels.yml
index 3bd647835081..eb60f0b300b6 100644
--- a/.github/workflows/hyperjump-labels.yml
+++ b/.github/workflows/hyperjump-labels.yml
@@ -10,7 +10,7 @@ jobs:
     name: (hyperjump) labels
     steps:
       - name: checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3
       - name: labels
         uses: diem/actions/hyperjump-labels@faa14430e68d54a269628f385e69a207e4e413d5
         with:
diff --git a/.github/workflows/hyperjump-request-review.yml b/.github/workflows/hyperjump-request-review.yml
index 7dc2fe0b2462..59b691c3afef 100644
--- a/.github/workflows/hyperjump-request-review.yml
+++ b/.github/workflows/hyperjump-request-review.yml
@@ -10,7 +10,7 @@ jobs:
     name: (hyperjump) request-review
     steps:
       - name: checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3
       - name: request review
         uses: diem/actions/hyperjump-request-review@faa14430e68d54a269628f385e69a207e4e413d5
         with:
diff --git a/.github/workflows/jsonrpc-compat.yml b/.github/workflows/jsonrpc-compat.yml
index acc25f5f5078..710920e113e4 100644
--- a/.github/workflows/jsonrpc-compat.yml
+++ b/.github/workflows/jsonrpc-compat.yml
@@ -11,7 +11,7 @@ jobs:
     name: Warn PR author about compatibility requirements
     steps:
       - name: checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3
         with:
           ref: ${{ github.event.pull_request.head.sha }}
       - name: comment
diff --git a/.github/workflows/post-land.yml b/.github/workflows/post-land.yml
index 7232bd78e4c5..833888c02a53 100644
--- a/.github/workflows/post-land.yml
+++ b/.github/workflows/post-land.yml
@@ -13,7 +13,7 @@ jobs:
     # The pre-release suite run time varies 1~1.5 hr.
     timeout-minutes: 120
     steps:
-      - uses: actions/checkout@v1
+      - uses: actions/checkout@v3
       - name: set_env
         id: set_env
         run: |
diff --git a/.github/workflows/rustdoc.yml b/.github/workflows/rustdoc.yml
index 475ca8cc668c..7da6bdf2474d 100644
--- a/.github/workflows/rustdoc.yml
+++ b/.github/workflows/rustdoc.yml
@@ -14,7 +14,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3
 
       - name: Install Rust toolchain
         uses: actions-rs/toolchain@v1