diff --git a/.github/workflows/main-lint.yml b/.github/workflows/main-lint.yml
index 8b28c8e..503556d 100644
--- a/.github/workflows/main-lint.yml
+++ b/.github/workflows/main-lint.yml
@@ -21,7 +21,7 @@ jobs:
     name: lint
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
         with:
           persist-credentials: false
       - uses: actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c # v6
diff --git a/.github/workflows/main-test.yaml b/.github/workflows/main-test.yaml
index 5294369..cf3ff52 100644
--- a/.github/workflows/main-test.yaml
+++ b/.github/workflows/main-test.yaml
@@ -23,7 +23,7 @@ jobs:
     env:
       DOCKER_BUILDKIT: 1
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
         with:
           # needed so we can properly determine versioning for building images/etc...
           fetch-depth: 0