diff --git a/.github/workflows/auto_update_collections.yaml b/.github/workflows/auto_update_collections.yaml
index af3d5a9..47f3e3b 100644
--- a/.github/workflows/auto_update_collections.yaml
+++ b/.github/workflows/auto_update_collections.yaml
@@ -21,7 +21,7 @@ jobs:
       pull-requests: write
     steps:
       - name: Checkout Consumer Repo
-        uses: actions/checkout@v7.0.0
+        uses: actions/checkout@v7.0.1
         with:
           persist-credentials: false
 
@@ -89,7 +89,7 @@ jobs:
 
       - name: Checkout Toolkit
         if: steps.upstream.outputs.UPDATE_NEEDED == 'true'
-        uses: actions/checkout@v7.0.0
+        uses: actions/checkout@v7.0.1
         with:
           repository: canonical/copilot-collections
           ref: ${{ steps.upstream.outputs.LATEST_VERSION }}
diff --git a/.github/workflows/license.yaml b/.github/workflows/license.yaml
index d8b4033..7b70233 100644
--- a/.github/workflows/license.yaml
+++ b/.github/workflows/license.yaml
@@ -10,7 +10,7 @@ jobs:
     name: Check license headers
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v7.0.0
+      - uses: actions/checkout@v7.0.1
       - name: Check .licenserc.yaml exists
         id: licenserc-yaml
         run: echo "exists=$([ -f .licenserc.yaml ] && echo "true" || echo "false")" >> $GITHUB_OUTPUT
diff --git a/.github/workflows/test-toolkit.yaml b/.github/workflows/test-toolkit.yaml
index ea5c2f6..f6fe25d 100644
--- a/.github/workflows/test-toolkit.yaml
+++ b/.github/workflows/test-toolkit.yaml
@@ -10,7 +10,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v7.0.0
+        uses: actions/checkout@v7.0.1
 
       - name: Install Tools
         run: sudo snap install yq