diff --git a/.github/workflows/audit.yaml b/.github/workflows/audit.yaml
index 1c293c2b496..2ab8d9a1263 100644
--- a/.github/workflows/audit.yaml
+++ b/.github/workflows/audit.yaml
@@ -10,7 +10,7 @@ jobs:
     outputs:
       nodePaths: ${{ steps.interrogate.outputs.nodePaths }}
     steps:
-      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
         with:
           fetch-depth: 0
       - uses: actions/setup-node@1a4442cacd436585916779262731d5b162bc6ec7 # v3
@@ -27,7 +27,7 @@ jobs:
       matrix:
         package: ${{fromJson(needs.findPackages.outputs.nodePaths)}}
     steps:
-      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
       - uses: actions/setup-node@1a4442cacd436585916779262731d5b162bc6ec7 # v3
         with:
           node-version: 18
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index ab5f9f5cffd..c927af78d34 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -14,7 +14,7 @@ jobs:
       bashPaths: ${{ steps.interrogate.outputs.bashPaths }}
       requiredJobs: ${{ steps.interrogate.outputs.requiredJobs }}
     steps:
-      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
         with:
           fetch-depth: 0
       - uses: actions/setup-node@1a4442cacd436585916779262731d5b162bc6ec7 # v3
@@ -32,7 +32,7 @@ jobs:
       matrix:
         package: ${{fromJson(needs.changeFinder.outputs.nodePaths)}}
     steps:
-      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
       - uses: actions/setup-node@1a4442cacd436585916779262731d5b162bc6ec7 # v3
         with:
           node-version: ${{ (endsWith(matrix.package, '-utils') || matrix.package == 'auto-approve' || matrix.package == 'canary-bot' || matrix.package == 'conventional-commit-lint' || matrix.package == 'datastore-lock' || matrix.package == 'object-selector' || matrix.package == 'release-please' || matrix.package == 'secret-rotator' || matrix.package == 'owl-bot' ) && 18 || 14 }}
@@ -60,7 +60,7 @@ jobs:
     - name: Install goimports
       run: go install golang.org/x/tools/cmd/goimports@latest
     - name: Checkout code
-      uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+      uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
     - name: goimports
       run: |
         test -z "$($(go env GOPATH)/bin/goimports -l .)"
@@ -79,7 +79,7 @@ jobs:
         module: ${{fromJson(needs.changeFinder.outputs.bashPaths)}}
     steps:
       - name: Checkout code
-        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
       - name: bashtest
         run: |
           ./test.sh
@@ -88,7 +88,7 @@ jobs:
     runs-on: ubuntu-latest
     needs: changeFinder
     steps:
-      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
       - uses: actions/setup-node@1a4442cacd436585916779262731d5b162bc6ec7 # v3
         with:
           node-version: 18
diff --git a/.github/workflows/deps.yaml b/.github/workflows/deps.yaml
index 6f9c5612bff..05a366d5f17 100644
--- a/.github/workflows/deps.yaml
+++ b/.github/workflows/deps.yaml
@@ -10,7 +10,7 @@ jobs:
     outputs:
       nodePaths: ${{ steps.interrogate.outputs.nodePaths }}
     steps:
-      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
         with:
           fetch-depth: 0
       - uses: actions/setup-node@1a4442cacd436585916779262731d5b162bc6ec7 # v3
@@ -27,7 +27,7 @@ jobs:
       matrix:
         package: ${{fromJson(needs.findPackages.outputs.nodePaths)}}
     steps:
-      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
       - uses: actions/setup-node@1a4442cacd436585916779262731d5b162bc6ec7 # v3
         with:
           node-version: ${{ matrix.node }}
diff --git a/.github/workflows/links.yaml b/.github/workflows/links.yaml
index 7430a3096e2..17ccf8835fb 100644
--- a/.github/workflows/links.yaml
+++ b/.github/workflows/links.yaml
@@ -14,7 +14,7 @@ jobs:
   linkChecker:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
 
       - name: Link Checker
         id: lychee