diff --git a/.github/workflows/ci-build.yml b/.github/workflows/ci-build.yml
index 5eb41a0b..757d869c 100644
--- a/.github/workflows/ci-build.yml
+++ b/.github/workflows/ci-build.yml
@@ -23,7 +23,7 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           persist-credentials: false
       - name: Use Node.js ${{ matrix.node-version }}
diff --git a/.github/workflows/samples.yml b/.github/workflows/samples.yml
index d2f4dfca..759765a6 100644
--- a/.github/workflows/samples.yml
+++ b/.github/workflows/samples.yml
@@ -24,7 +24,7 @@ jobs:
         uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
         with:
           node-version: ${{ matrix.node-version }}
-      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           persist-credentials: false
       - name: Package the latest changes to bolt-js
@@ -52,7 +52,7 @@ jobs:
         with:
           node-version: ${{ matrix.node-version }}
       - name: Checkout bolt-js
-        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           path: ./bolt-js
           persist-credentials: false
@@ -60,7 +60,7 @@ jobs:
         working-directory: ./bolt-js
         run: npm i && npm pack . && rm -rf node_modules
       - name: Checkout ${{ matrix.sample }}
-        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           repository: ${{ matrix.sample }}
           path: ./sample