diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index bfdd249f..51925c0c 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -19,7 +19,7 @@ jobs:
       group: bottlerocket
       labels: bottlerocket_ubuntu-latest_8-core
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8
       - run: make sdk-build
         # If we forget to add yamlgen changes to our commits, this will fail.
       - name: ensure that git is clean
diff --git a/.github/workflows/licenses.yaml b/.github/workflows/licenses.yaml
index b5ed3856..02ccc8a9 100644
--- a/.github/workflows/licenses.yaml
+++ b/.github/workflows/licenses.yaml
@@ -20,5 +20,5 @@ jobs:
     # If we already checked the PR, we don't need to check the actual push
     if: ${{ github.event_name == 'pull_request' }}
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8
       - run: make cargo-deny
diff --git a/.github/workflows/lint.yaml b/.github/workflows/lint.yaml
index fc7223ba..82ae4bd8 100644
--- a/.github/workflows/lint.yaml
+++ b/.github/workflows/lint.yaml
@@ -15,5 +15,5 @@ jobs:
   checklint:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8
       - run: make mdlint
diff --git a/.github/workflows/tools.yaml b/.github/workflows/tools.yaml
index 20006ca1..a8229d43 100644
--- a/.github/workflows/tools.yaml
+++ b/.github/workflows/tools.yaml
@@ -19,7 +19,7 @@ jobs:
       group: bottlerocket
       labels: bottlerocket_ubuntu-latest_16-core
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8
       # Build local tools container in case we are working on a new tools release
       - run: make tools
       - run: make images