diff --git a/.github/workflows/add-tag-to-existing-image.yml b/.github/workflows/add-tag-to-existing-image.yml
index ec25aec979..6399942bb2 100644
--- a/.github/workflows/add-tag-to-existing-image.yml
+++ b/.github/workflows/add-tag-to-existing-image.yml
@@ -29,7 +29,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check out repository code
-        uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
+        uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
       - name: Run add-tag-to-existing-image.sh
         if: github.event.inputs.images != '' && github.event.inputs.tags != ''
         run: make add-tag-to-existing-image.sh
diff --git a/.github/workflows/retrieve-image-tags.yml b/.github/workflows/retrieve-image-tags.yml
index ba3a0b687a..dc6e17901c 100644
--- a/.github/workflows/retrieve-image-tags.yml
+++ b/.github/workflows/retrieve-image-tags.yml
@@ -13,7 +13,7 @@ jobs:
   retrieve-image-tags:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
+    - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
     - uses: actions/setup-python@f677139bbe7f9c59b41e40162b753c062f5d49a3 # v5.2.0
       with:
         python-version: '3.10'
diff --git a/.github/workflows/validate-retrieve-image-tags-config.yml b/.github/workflows/validate-retrieve-image-tags-config.yml
index 895462fd8e..f5e1ec3e2c 100644
--- a/.github/workflows/validate-retrieve-image-tags-config.yml
+++ b/.github/workflows/validate-retrieve-image-tags-config.yml
@@ -11,7 +11,7 @@ jobs:
   validate-retrieve-image-tags:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
+    - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
     - name: Validate JSON
       run: jq type retrieve-image-tags/config.json
     - uses: actions/setup-python@f677139bbe7f9c59b41e40162b753c062f5d49a3 # v5.2.0