diff --git a/.github/workflows/commitlint.yml b/.github/workflows/commitlint.yml
index 3f79eee..07fd2ab 100644
--- a/.github/workflows/commitlint.yml
+++ b/.github/workflows/commitlint.yml
@@ -14,7 +14,7 @@ jobs:
     env:
       GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
     steps:
-      - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           fetch-depth: 0
           persist-credentials: false
diff --git a/.github/workflows/libsafe-settings.yml b/.github/workflows/libsafe-settings.yml
index 062bb0b..e05bc0c 100644
--- a/.github/workflows/libsafe-settings.yml
+++ b/.github/workflows/libsafe-settings.yml
@@ -50,11 +50,11 @@ jobs:
           APP_ID: ${{ vars.SAFE_SETTINGS_APP_ID }}
           PRIVATE_KEY: ${{ secrets.SAFE_SETTINGS_PRIVATE_KEY }}
       # Self-checkout to access deployment configuration
-      - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
       # Checkout of `safe-settings` source repository to run app
-      - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           repository: dafyddj/safe-settings
           ref: ${{ env.SAFE_SETTINGS_VERSION }}
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 13bca8b..982cbc8 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -31,7 +31,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 5
     steps:
-      - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
       - name: Export `CI_CACHE_ID` from container