diff --git a/.github/workflows/docker.yaml b/.github/workflows/docker.yaml
index 24a1d7c..fb706b5 100644
--- a/.github/workflows/docker.yaml
+++ b/.github/workflows/docker.yaml
@@ -20,7 +20,7 @@ jobs:
     outputs:
       images: ${{ steps.filter.outputs.changes }}
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - uses: dorny/paths-filter@7b450fff21473bca461d4b92ce414b9d0420d706 # v4.0.2
         id: filter
         with:
@@ -41,7 +41,7 @@ jobs:
       matrix:
         image: ${{ fromJSON(startsWith(github.ref, 'refs/tags/') && '["goose","keyserver"]' || needs.changes.outputs.images) }}
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - uses: sigstore/cosign-installer@6f9f17788090df1f26f669e9d70d6ae9567deba6 # v4.1.2
         with:
           cosign-release: 'v2.2.4'
diff --git a/.github/workflows/pre-commit.yaml b/.github/workflows/pre-commit.yaml
index c833a34..f9c5a28 100644
--- a/.github/workflows/pre-commit.yaml
+++ b/.github/workflows/pre-commit.yaml
@@ -11,7 +11,7 @@ jobs:
   pre-commit:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - name: install pre-commit
         run: pip install pre-commit
 
diff --git a/.github/workflows/release-please.yaml b/.github/workflows/release-please.yaml
index 5171fda..6fbec11 100644
--- a/.github/workflows/release-please.yaml
+++ b/.github/workflows/release-please.yaml
@@ -58,7 +58,7 @@ jobs:
             core.setOutput('chart-name',chartName);
             core.setOutput('chart-version',chartVersion)
             core.setOutput('chart-git-tag', gitTag)
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - name: Build dependencies Helm - ${{ steps.release.outputs.chart-name }}
         uses: WyriHaximus/github-action-helm3@e3894d973c282349e3d41d3347767f2b2545b583 # v4.0.2
         with: