diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index 8ce78fe..d711028 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -16,7 +16,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check out the repo
-        uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c
+        uses: actions/checkout@3b9b8c884f6b4bb4d5be2779c26374abadae0871
 
       - name: Extract metadata (tags, labels) for Docker
         id: meta
diff --git a/.github/workflows/publish-readme.yaml b/.github/workflows/publish-readme.yaml
index 0dfc5f3..3d714da 100644
--- a/.github/workflows/publish-readme.yaml
+++ b/.github/workflows/publish-readme.yaml
@@ -28,7 +28,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check out the repo
-        uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c
+        uses: actions/checkout@3b9b8c884f6b4bb4d5be2779c26374abadae0871
 
       - name: Make relative urls absolute
         run: |
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index e517662..b360d5a 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -15,7 +15,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check out the repo
-        uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c
+        uses: actions/checkout@3b9b8c884f6b4bb4d5be2779c26374abadae0871
         with:
           persist-credentials: false