diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index f7f6f0a92..7446836ad 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -23,7 +23,7 @@ jobs:
     timeout-minutes: 45
     steps:
       - name: Check out repository without retained credentials
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
         with:
           fetch-depth: 0
           persist-credentials: false
diff --git a/.github/workflows/cua-driver-self-hosted-native.yml b/.github/workflows/cua-driver-self-hosted-native.yml
index 1512fe4ae..66e84dae6 100644
--- a/.github/workflows/cua-driver-self-hosted-native.yml
+++ b/.github/workflows/cua-driver-self-hosted-native.yml
@@ -65,7 +65,7 @@ jobs:
         run: echo "LING_CUA_BUILD_ROOT=$RUNNER_TEMP/ling-cua-driver-source-build/$GITHUB_RUN_ID-$GITHUB_RUN_ATTEMPT/macos" >> "$GITHUB_ENV"
 
       - name: Check out the authorized commit without retaining credentials
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
         with:
           clean: true
           fetch-depth: 1
@@ -204,7 +204,7 @@ jobs:
         run: echo "LING_CUA_PROMOTION_ROOT=$RUNNER_TEMP/ling-cua-driver-promotion/$GITHUB_RUN_ID-$GITHUB_RUN_ATTEMPT/macos" >> "$GITHUB_ENV"
 
       - name: Check out the authorized commit without retaining credentials
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
         with:
           clean: true
           fetch-depth: 1
@@ -271,7 +271,7 @@ jobs:
         run: '"LING_CUA_BUILD_ROOT=$env:RUNNER_TEMP\ling-cua-driver-source-build\$env:GITHUB_RUN_ID-$env:GITHUB_RUN_ATTEMPT\windows" | Out-File -FilePath $env:GITHUB_ENV -Encoding utf8 -Append'
 
       - name: Check out the authorized commit without retaining credentials
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
         with:
           clean: true
           fetch-depth: 1
@@ -391,7 +391,7 @@ jobs:
         run: '"LING_CUA_PROMOTION_ROOT=$env:RUNNER_TEMP\ling-cua-driver-promotion\$env:GITHUB_RUN_ID-$env:GITHUB_RUN_ATTEMPT\windows" | Out-File -FilePath $env:GITHUB_ENV -Encoding utf8 -Append'
 
       - name: Check out the authorized commit without retaining credentials
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
         with:
           clean: true
           fetch-depth: 1
diff --git a/.github/workflows/desktop-artifacts.yml b/.github/workflows/desktop-artifacts.yml
index 3a475b325..30f6d894d 100644
--- a/.github/workflows/desktop-artifacts.yml
+++ b/.github/workflows/desktop-artifacts.yml
@@ -32,7 +32,7 @@ jobs:
     timeout-minutes: 180
     steps:
       - name: Check out repository
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
         with:
           clean: true
           fetch-depth: 1
@@ -171,7 +171,7 @@ jobs:
     timeout-minutes: 180
     steps:
       - name: Check out repository
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
         with:
           clean: true
           fetch-depth: 1