diff --git a/.github/workflows/auto-approver.yaml b/.github/workflows/auto-approver.yaml
index a326e460..a539b902 100644
--- a/.github/workflows/auto-approver.yaml
+++ b/.github/workflows/auto-approver.yaml
@@ -11,7 +11,7 @@ jobs:
   autoapprove:
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
+      - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4
       - name: Approve PR
         run: |
           gh pr review --approve || true
diff --git a/.github/workflows/on_pull_request.yaml b/.github/workflows/on_pull_request.yaml
index f515dc96..0f24460d 100644
--- a/.github/workflows/on_pull_request.yaml
+++ b/.github/workflows/on_pull_request.yaml
@@ -13,7 +13,7 @@ jobs:
     runs-on: ubuntu-22.04
     steps:
       - name: Checkout
-        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
+        uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4
 
       - name: Install dependencies
         run: python3 -m pip install tox
diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml
index ab4f4a6e..89ceb960 100644
--- a/.github/workflows/publish.yaml
+++ b/.github/workflows/publish.yaml
@@ -33,7 +33,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
+        uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4
         with:
           fetch-depth: 0
           ref: ${{ inputs.source_branch }}
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 11a313a3..54f87119 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -16,7 +16,7 @@ jobs:
     name: Promote charm
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
+      - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4
       - name: Release charm to channel
         uses: canonical/charming-actions/release-charm@934193396735701141a1decc3613818e412da606 # 2.6.3
         with:
diff --git a/.github/workflows/release_libs.yaml b/.github/workflows/release_libs.yaml
index 2eb5bcc3..69235e5f 100644
--- a/.github/workflows/release_libs.yaml
+++ b/.github/workflows/release_libs.yaml
@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-22.04
     steps:
       - name: Checkout
-        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
+        uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4
         with:
           fetch-depth: 0
       - name: Release any bumped charm library
diff --git a/.github/workflows/tests.yaml b/.github/workflows/tests.yaml
index 47b2cef7..24b04180 100644
--- a/.github/workflows/tests.yaml
+++ b/.github/workflows/tests.yaml
@@ -9,7 +9,7 @@ jobs:
     runs-on: ubuntu-22.04
     steps:
       - name: Checkout
-        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
+        uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4
 
       - name: Install dependencies
         run: python -m pip install tox
@@ -24,7 +24,7 @@ jobs:
       - unit-test
     steps:
       - name: Checkout
-        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
+        uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4
 
       - name: Setup operator environment
         uses: charmed-kubernetes/actions-operator@main
diff --git a/.github/workflows/update_libs.yaml b/.github/workflows/update_libs.yaml
index 0df7f0f8..25a3996d 100644
--- a/.github/workflows/update_libs.yaml
+++ b/.github/workflows/update_libs.yaml
@@ -27,7 +27,7 @@ jobs:
     name: Update charm libraries
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
+      - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4
         with:
           fetch-depth: 0