diff --git a/.github/workflows/drift-check.yml b/.github/workflows/drift-check.yml
index 8023b3f..84c298e 100644
--- a/.github/workflows/drift-check.yml
+++ b/.github/workflows/drift-check.yml
@@ -19,7 +19,7 @@ jobs:
   check:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
 
       - uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6
         with:
diff --git a/.github/workflows/enforce-repo-settings.yml b/.github/workflows/enforce-repo-settings.yml
index e4471ed..ad945d1 100644
--- a/.github/workflows/enforce-repo-settings.yml
+++ b/.github/workflows/enforce-repo-settings.yml
@@ -38,7 +38,7 @@ jobs:
           fi
           gh api /user --jq .login
 
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
 
       - name: Resolve target user repos
         id: targets
@@ -205,7 +205,7 @@ jobs:
           fi
           gh api /orgs/O-ANcppLua --jq .login
 
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
 
       - name: Resolve target org repos
         id: targets