diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index b0f2841..50bb2b8 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -32,7 +32,7 @@ jobs:
         working-directory: ./clevis-pin-tpm2
     steps:
       - name: "Check out repository"
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           path: clevis-pin-tpm2
       - name: "Install dependencies"
@@ -46,7 +46,7 @@ jobs:
       - name: "cargo build"
         run: cargo build --all-targets
       - name: "Check out the policy signtool"
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           path: clevis-pin-tpm2-signtool
           repository: puiterwijk/clevis-pin-tpm2-signtool
@@ -85,7 +85,7 @@ jobs:
         working-directory: ./clevis-pin-tpm2
     steps:
       - name: "Check out repository"
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           path: clevis-pin-tpm2
       - name: "Install dependencies"
@@ -99,7 +99,7 @@ jobs:
       - name: "cargo build (release)"
         run: cargo build --all-targets --release
       - name: "Check out the policy signtool"
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           path: clevis-pin-tpm2-signtool
           repository: puiterwijk/clevis-pin-tpm2-signtool
@@ -138,7 +138,7 @@ jobs:
         working-directory: ./clevis-pin-tpm2
     steps:
       - name: "Check out repository"
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           path: clevis-pin-tpm2
       - name: "Install dependencies"
@@ -158,7 +158,7 @@ jobs:
       - name: "cargo build (release)"
         run: cargo build --all-targets --release
       - name: "Check out the policy signtool"
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           path: clevis-pin-tpm2-signtool
           repository: puiterwijk/clevis-pin-tpm2-signtool
@@ -194,7 +194,7 @@ jobs:
     container: "ghcr.io/trusted-execution-clusters/buildroot:latest"
     steps:
       - name: "Check out repository"
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
       - name: "Install dependencies"
         run: dnf install -y tpm2-tss-devel clang-devel
       - name: "Install toolchain"
@@ -221,7 +221,7 @@ jobs:
         channel: [beta, nightly]
     steps:
       - name: "Check out repository"
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           path: clevis-pin-tpm2
       - name: "Install dependencies"
@@ -235,7 +235,7 @@ jobs:
       - name: "cargo build"
         run: cargo build --all-targets
       - name: "Check out the policy signtool"
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           path: clevis-pin-tpm2-signtool
           repository: puiterwijk/clevis-pin-tpm2-signtool
diff --git a/.github/workflows/reuse-lint.yml b/.github/workflows/reuse-lint.yml
index 0146ff5..bb2e957 100644
--- a/.github/workflows/reuse-lint.yml
+++ b/.github/workflows/reuse-lint.yml
@@ -13,7 +13,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: REUSE Compliance Check
         uses: fsfe/reuse-action@v6