diff --git a/.github/workflows/auto_publish_release.yml b/.github/workflows/auto_publish_release.yml
index e756e74be..93b1def5f 100644
--- a/.github/workflows/auto_publish_release.yml
+++ b/.github/workflows/auto_publish_release.yml
@@ -22,7 +22,7 @@ jobs:
     steps:
 
       - name: Checkout repo
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3.1.0
         with:
           ref: ${{ env.MERGE_SHA }}
 
diff --git a/.github/workflows/create_release_pr.yml b/.github/workflows/create_release_pr.yml
index ff491d427..95eb42166 100644
--- a/.github/workflows/create_release_pr.yml
+++ b/.github/workflows/create_release_pr.yml
@@ -24,7 +24,7 @@ jobs:
         uses: cylc/release-actions/check-shortlog@v1
 
       - name: Checkout repo
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3.1.0
         with:
           ref: ${{ env.BASE_REF }}
 
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index ed959a51e..28025505f 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -10,7 +10,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3.1.0
       - name: Setup Node
         uses: actions/setup-node@v2
         with:
@@ -57,7 +57,7 @@ jobs:
 #            browser: edge
     steps:
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3.1.0
       - name: Setup Node
         uses: actions/setup-node@v2
         with:
diff --git a/.github/workflows/shortlog.yml b/.github/workflows/shortlog.yml
index 7113a32d9..18adfe786 100644
--- a/.github/workflows/shortlog.yml
+++ b/.github/workflows/shortlog.yml
@@ -12,7 +12,7 @@ jobs:
     timeout-minutes: 10
     steps:
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3.1.0
         with:
           fetch-depth: 0  # need to fetch all commits to check contributors
 
diff --git a/.github/workflows/update_copyright.yml b/.github/workflows/update_copyright.yml
index f6e6becf2..e1051f8d8 100644
--- a/.github/workflows/update_copyright.yml
+++ b/.github/workflows/update_copyright.yml
@@ -29,7 +29,7 @@ jobs:
     steps:
 
       - name: Checkout repo
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3.1.0
 
       - name: Configure git
         uses: cylc/release-actions/configure-git@v1