diff --git a/.github/workflows/check-buildah-remote.yaml b/.github/workflows/check-buildah-remote.yaml
index 3b3aa98dd..c96539c09 100644
--- a/.github/workflows/check-buildah-remote.yaml
+++ b/.github/workflows/check-buildah-remote.yaml
@@ -7,7 +7,7 @@ jobs:
     name: Check Buildah Remote
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332  # v4
+      - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4
       - name: Install Go
         uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32  # v5
         with:
diff --git a/.github/workflows/go-ci.yaml b/.github/workflows/go-ci.yaml
index 14711fe3e..24dff338f 100644
--- a/.github/workflows/go-ci.yaml
+++ b/.github/workflows/go-ci.yaml
@@ -12,7 +12,7 @@ jobs:
           - task-generator/remote
           - task-generator/trusted-artifacts
     steps:
-      - uses: actions/checkout@6d193bf28034eafb982f37bd894289fe649468fc
+      - uses: actions/checkout@163217dfcd28294438ea1c1c149cfaf66eec283e
       - uses: actions/setup-go@b26d40294f8ad76fcc90b915dac85892322fe62d
         with:
           go-version-file: './${{matrix.path}}/go.mod'
@@ -31,7 +31,7 @@ jobs:
           - task-generator/remote
           - task-generator/trusted-artifacts
     steps:
-      - uses: actions/checkout@6d193bf28034eafb982f37bd894289fe649468fc
+      - uses: actions/checkout@163217dfcd28294438ea1c1c149cfaf66eec283e
       - name: Install Go
         uses: actions/setup-go@b26d40294f8ad76fcc90b915dac85892322fe62d
         with:
@@ -72,7 +72,7 @@ jobs:
           - task-generator/remote
           - task-generator/trusted-artifacts
     steps:
-      - uses: actions/checkout@6d193bf28034eafb982f37bd894289fe649468fc
+      - uses: actions/checkout@163217dfcd28294438ea1c1c149cfaf66eec283e
       - uses: actions/setup-go@b26d40294f8ad76fcc90b915dac85892322fe62d
         with:
           go-version-file: './${{matrix.path}}/go.mod'