diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index c0b5b9c..5ba609c 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -28,7 +28,7 @@ jobs:
           go-version: ${{ matrix.go-version }}
 
       - name: Check out code into the Go module directory
-        uses: actions/checkout@v4.2.1
+        uses: actions/checkout@v4.2.2
 
       - name: Print Go environment
         id: vars
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 1ef547a..295b34b 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -21,7 +21,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4.2.1
+        uses: actions/checkout@v4.2.2
         with:
           # We must fetch at least the immediate parents so that if this is
           # a pull request then we can checkout the head.
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index f8ec5af..df07d39 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -10,7 +10,7 @@ jobs:
     name: Golangci-Lint
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4.2.1
+      - uses: actions/checkout@v4.2.2
       - name: Run golangci-lint
         uses: golangci/golangci-lint-action@v6
         with:
diff --git a/.github/workflows/pr_review_dog.yml b/.github/workflows/pr_review_dog.yml
index eae023b..556e356 100644
--- a/.github/workflows/pr_review_dog.yml
+++ b/.github/workflows/pr_review_dog.yml
@@ -17,7 +17,7 @@ jobs:
           go-version: "1.20.x"
 
       - name: Check out code into the Go module directory
-        uses: actions/checkout@v4.2.1
+        uses: actions/checkout@v4.2.2
 
       - name: golangci-lint
         uses: reviewdog/action-golangci-lint@v2