diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 48a1ddc..7b3ea37 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -20,7 +20,7 @@ jobs:
     name: build · test · size
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
         with:
           node-version: 20
@@ -50,7 +50,7 @@ jobs:
     name: slither (advisory)
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
         with:
           node-version: 20
@@ -108,7 +108,7 @@ jobs:
     name: aderyn (advisory)
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
         with:
           node-version: 20
@@ -141,7 +141,7 @@ jobs:
     name: echidna (advisory)
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
         with:
           node-version: 20
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index b410574..893f133 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -24,7 +24,7 @@ jobs:
     timeout-minutes: 20
     steps:
       - name: Checkout
-        uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - name: Initialize CodeQL
         uses: github/codeql-action/init@4187e74d05793876e9989daffde9c3e66b4acd07 # v3
         with:
diff --git a/.github/workflows/v4-epoch-maintainer.yml b/.github/workflows/v4-epoch-maintainer.yml
index 9e94338..ede6544 100644
--- a/.github/workflows/v4-epoch-maintainer.yml
+++ b/.github/workflows/v4-epoch-maintainer.yml
@@ -26,7 +26,7 @@ jobs:
     env:
       BASE_RPC_URL: ${{ secrets.BASE_RPC_URL }}
     steps:
-      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
         with:
           node-version: 20
diff --git a/.github/workflows/v4-liquidity-maintainer.yml b/.github/workflows/v4-liquidity-maintainer.yml
index 81f2d7d..0aae1d2 100644
--- a/.github/workflows/v4-liquidity-maintainer.yml
+++ b/.github/workflows/v4-liquidity-maintainer.yml
@@ -33,7 +33,7 @@ jobs:
       V4_COMPOUND_SQRT_PRICE_GUARD_BPS: ${{ vars.V4_COMPOUND_SQRT_PRICE_GUARD_BPS }}
       V4_COMPOUND_MAX_VALUE_IMBALANCE_BPS: ${{ vars.V4_COMPOUND_MAX_VALUE_IMBALANCE_BPS }}
     steps:
-      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
         with:
           node-version: 20