diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 79b3dac..e0f9965 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -33,7 +33,7 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11  # v4.1.1
+      uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633  # v4.1.2
 
     - name: Initialize CodeQL
       uses: github/codeql-action/init@012739e5082ff0c22ca6d6ab32e07c36df03c4a4  # v3.22.12
diff --git a/.github/workflows/csds-client.yaml b/.github/workflows/csds-client.yaml
index c8886d1..c535c2d 100644
--- a/.github/workflows/csds-client.yaml
+++ b/.github/workflows/csds-client.yaml
@@ -16,7 +16,7 @@ jobs:
           - macos-latest
           - ubuntu-latest
     steps:
-    - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0
+    - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v4.1.2
     - name: Build
       run: make -C csds-client
     - name: Test
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index db5193d..79a4325 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -21,7 +21,7 @@ jobs:
 
     steps:
     - name: "Checkout code"
-      uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11  # v4.1.1
+      uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633  # v4.1.2
       with:
         persist-credentials: false