diff --git a/.github/workflows/lint.yaml b/.github/workflows/lint.yaml
index 6d8eb624d..e4e5f5378 100644
--- a/.github/workflows/lint.yaml
+++ b/.github/workflows/lint.yaml
@@ -11,7 +11,7 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: Set up Go
         uses: actions/setup-go@40f1582b2485089dde7abd97c1529aa768e1baff # v5
diff --git a/.github/workflows/sync-spec-tests-merge.yaml b/.github/workflows/sync-spec-tests-merge.yaml
index 3f9c4805e..468a8c68d 100644
--- a/.github/workflows/sync-spec-tests-merge.yaml
+++ b/.github/workflows/sync-spec-tests-merge.yaml
@@ -14,7 +14,7 @@ jobs:
     env:
       SPEC_TESTS_REPO: ${{ vars.SPEC_TESTS_REPO }}
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: Validate required variables
         run: |
diff --git a/.github/workflows/sync-spec-tests-pr.yaml b/.github/workflows/sync-spec-tests-pr.yaml
index a2a555202..124536df9 100644
--- a/.github/workflows/sync-spec-tests-pr.yaml
+++ b/.github/workflows/sync-spec-tests-pr.yaml
@@ -23,7 +23,7 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: Validate required variables
         run: |
diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml
index 1c11f5d37..e06b12e86 100644
--- a/.github/workflows/test.yaml
+++ b/.github/workflows/test.yaml
@@ -13,7 +13,7 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: Generate spec tests
         uses: ./.github/actions/generate-spec-tests