diff --git a/.github/workflows/automation-open-pull-request.yaml b/.github/workflows/automation-open-pull-request.yaml
index 457ccaaac0..616f112700 100644
--- a/.github/workflows/automation-open-pull-request.yaml
+++ b/.github/workflows/automation-open-pull-request.yaml
@@ -8,7 +8,7 @@ jobs:
   open-pull-request:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
 
       - name: "open a pull request"
         id: open-pr
diff --git a/.github/workflows/automation-release.yaml b/.github/workflows/automation-release.yaml
index a4e405a8c9..7db3c438e2 100644
--- a/.github/workflows/automation-release.yaml
+++ b/.github/workflows/automation-release.yaml
@@ -19,7 +19,7 @@ jobs:
       latest_tag: ${{ steps.version-number.outputs.latest_tag }}
       should_update_azurerm: ${{ steps.results.outputs.should_update_azurerm }}
     steps:
-      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
         with:
           token: ${{ secrets.SERVICE_ACCOUNT_GO_SDK_TOKEN }}
 
@@ -57,7 +57,7 @@ jobs:
     outputs:
       has_changes_to_push: ${{ steps.update-azurerm-provider.outputs.has_changes_to_push }}
     steps:
-      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
         with:
           fetch-depth: 0
           token: ${{ secrets.SERVICE_ACCOUNT_GO_SDK_TOKEN }}
diff --git a/.github/workflows/pr-acceptance-tests.yml b/.github/workflows/pr-acceptance-tests.yml
index e633c6bdf8..c5fc8b0e71 100644
--- a/.github/workflows/pr-acceptance-tests.yml
+++ b/.github/workflows/pr-acceptance-tests.yml
@@ -33,7 +33,7 @@ jobs:
     if: needs.secrets-check.outputs.available == 'true'
     steps:
       - name: Checkout
-        uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
 
       - name: Azure CLI login
         run: az login --allow-no-subscriptions --output none --service-principal --tenant="${{ secrets.ARM_TENANT_ID }}" --username="${{ secrets.ARM_CLIENT_ID }}" --password="${{ secrets.ARM_CLIENT_SECRET }}"
diff --git a/.github/workflows/pr-unit-tests.yaml b/.github/workflows/pr-unit-tests.yaml
index 966c9726ad..81540ed19d 100644
--- a/.github/workflows/pr-unit-tests.yaml
+++ b/.github/workflows/pr-unit-tests.yaml
@@ -8,7 +8,7 @@ jobs:
   unit-test:
     runs-on: custom-linux-medium
     steps:
-      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
 
       - uses: actions/setup-go@f111f3307d8850f501ac008e886eec1fd1932a34 # v5.3.0
         with:
diff --git a/.github/workflows/pr-validate-go-get.yaml b/.github/workflows/pr-validate-go-get.yaml
index 4ca16c3d5c..ab665de531 100644
--- a/.github/workflows/pr-validate-go-get.yaml
+++ b/.github/workflows/pr-validate-go-get.yaml
@@ -8,7 +8,7 @@ jobs:
   validate-go-get:
     runs-on: custom-linux-medium
     steps:
-      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
 
       - uses: actions/setup-go@f111f3307d8850f501ac008e886eec1fd1932a34 # v5.3.0
         with: