diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 9cf6a1ffaed9..0d6d8b2ac8de 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -24,7 +24,7 @@ jobs:
           test-bot: false
 
       - name: Check out Pull Request
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3.1.0
         with:
           fetch-depth: 0
           persist-credentials: false
@@ -50,7 +50,7 @@ jobs:
           test-bot: false
 
       - name: Check out Pull Request
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3.1.0
         with:
           fetch-depth: 0
           persist-credentials: false
diff --git a/.github/workflows/sync-labels.yml b/.github/workflows/sync-labels.yml
index 240d3ef919e4..a9b88e7379b9 100644
--- a/.github/workflows/sync-labels.yml
+++ b/.github/workflows/sync-labels.yml
@@ -7,7 +7,7 @@ jobs:
     if: github.repository == 'Homebrew/homebrew-cask'
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3.1.0
         with:
           persist-credentials: false
 
diff --git a/.github/workflows/sync-templates-and-ci-config.yml b/.github/workflows/sync-templates-and-ci-config.yml
index f03369beef5e..c2c4679868e3 100644
--- a/.github/workflows/sync-templates-and-ci-config.yml
+++ b/.github/workflows/sync-templates-and-ci-config.yml
@@ -22,12 +22,12 @@ jobs:
           - Homebrew/homebrew-cask-versions
     steps:
       - name: Clone main repository
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3.1.0
         with:
           persist-credentials: false
 
       - name: Clone secondary repository
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3.1.0
         with:
           repository: ${{ matrix.repo }}
           path: vendor/${{ matrix.repo }}