diff --git a/.github/workflows/bulwark-golicences.yaml b/.github/workflows/bulwark-golicences.yaml
index 036954a..134f157 100644
--- a/.github/workflows/bulwark-golicences.yaml
+++ b/.github/workflows/bulwark-golicences.yaml
@@ -16,7 +16,7 @@ jobs:
         run: sudo apt-get install -y git
 
       - name: checkout
-        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4
+        uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4
 
       - name: Set up Go
         uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5
diff --git a/.github/workflows/bulwark-gosec.yaml b/.github/workflows/bulwark-gosec.yaml
index 78d91fe..6c9a388 100644
--- a/.github/workflows/bulwark-gosec.yaml
+++ b/.github/workflows/bulwark-gosec.yaml
@@ -17,7 +17,7 @@ jobs:
         REPO: ${{ github.event.repository.name }}
     steps:
       - name: checkout
-        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4
+        uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4
 
       - name: Set up Go
         uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5
diff --git a/.github/workflows/bulwark-govulncheck.yaml b/.github/workflows/bulwark-govulncheck.yaml
index ffb08c2..b2c47be 100644
--- a/.github/workflows/bulwark-govulncheck.yaml
+++ b/.github/workflows/bulwark-govulncheck.yaml
@@ -18,7 +18,7 @@ jobs:
         run: GOBIN=/usr/local/bin go install golang.org/x/vuln/cmd/govulncheck@latest
 
       - name: checkout
-        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4
+        uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4
 
       - name: govulncheck-scan
         run: |
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index d7b44f8..2e4f8e9 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -27,7 +27,7 @@ jobs:
     # Release-please creates a PR that tracks all changes
     steps:
       - name: Checkout
-        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4
+        uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4
 
       - uses: googleapis/release-please-action@f3969c04a4ec81d7a9aa4010d84ae6a7602f86a7 # v4
         id: release
@@ -41,7 +41,7 @@ jobs:
     runs-on: [self-hosted, Linux, X64, validator]
     if: needs.release-please.outputs.releases_created == 'true'
     steps:
-      - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4
+      - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4
       - name: Publish Helm chart
         uses: stefanprodan/helm-gh-pages@master
         with:
@@ -66,7 +66,7 @@ jobs:
       IMAGE_NAME: validator-plugin-kubescape
     steps:
       - name: Checkout
-        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4
+        uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4
         with:
           submodules: recursive
 
diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml
index d6abb91..1231e2d 100644
--- a/.github/workflows/test.yaml
+++ b/.github/workflows/test.yaml
@@ -16,7 +16,7 @@ jobs:
     name: Run Unit Tests
     runs-on: [self-hosted, Linux, X64, validator]
     steps:
-      - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4
+      - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4
 
       - name: Set up Go
         uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5
@@ -42,7 +42,7 @@ jobs:
     runs-on: [self-hosted, Linux, X64, validator]
     if: "!(contains(github.head_ref, 'release-please') || contains(github.ref, 'release-please'))"
     steps:
-      - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4
+      - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4
         with:
           fetch-depth: 0