diff --git a/.github/workflows/dependabot_changelog.yml b/.github/workflows/dependabot_changelog.yml
index 46d5529..94d0224 100644
--- a/.github/workflows/dependabot_changelog.yml
+++ b/.github/workflows/dependabot_changelog.yml
@@ -13,7 +13,7 @@ jobs:
       - name: Fetch dependabot metadata
         id: dependabot-metadata
         uses: dependabot/fetch-metadata@c9c4182bf1b97f5224aee3906fd373f6b61b4526    # v1.6.0
-      - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608             # v4.5.4
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11             # v4.5.4
       - run: |
           gh pr checkout $PR_URL
           cat << EOF > .changelog/$PR_NUMBER.txt
diff --git a/.github/workflows/doc-lint.yml b/.github/workflows/doc-lint.yml
index c2ebace..4a3bb0c 100644
--- a/.github/workflows/doc-lint.yml
+++ b/.github/workflows/doc-lint.yml
@@ -18,7 +18,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
 
       # Runs actions-markdownlint
       - uses: articulate/actions-markdownlint@v1
diff --git a/.github/workflows/generate_changelog.yml b/.github/workflows/generate_changelog.yml
index 6dbddac..1ebe4c5 100644
--- a/.github/workflows/generate_changelog.yml
+++ b/.github/workflows/generate_changelog.yml
@@ -8,7 +8,7 @@ jobs:
     if: github.event.pull_request.merged || github.event_name == 'workflow_dispatch'
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.5.4
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.5.4
         with:
           fetch-depth: 0
           submodules: true
diff --git a/.github/workflows/go-generate.yml b/.github/workflows/go-generate.yml
index 02eaaf7..312a926 100644
--- a/.github/workflows/go-generate.yml
+++ b/.github/workflows/go-generate.yml
@@ -13,7 +13,7 @@ jobs:
   go-generate:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
       - uses: actions/setup-go@v4
       - run: go generate ./...
       - run: git status --ignored
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index e09b22d..30beee1 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -9,7 +9,7 @@ jobs:
   release-notes:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.5.4
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.5.4
         with:
           fetch-depth: 0
       - name: Generate Release Notes
@@ -45,7 +45,7 @@ jobs:
     outputs:
       tag: ${{ steps.highest-version-tag.outputs.tag }}
     steps:
-      - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.5.4
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.5.4
         with:
           # Allow tag to be fetched when ref is a commit
           fetch-depth: 0
@@ -66,7 +66,7 @@ jobs:
     permissions:
       contents: write
     steps:
-      - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.5.4
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.5.4
         with:
           fetch-depth: 0
           ref: main
diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index b3d4f8f..dbd22ba 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -24,7 +24,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 5
     steps:
-      - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
       - uses: actions/setup-go@v4
         with:
           go-version-file: 'go.mod'
@@ -48,7 +48,7 @@ jobs:
       - uses: actions/setup-go@v4
         with:
           go-version: ${{ matrix.go }}
-      - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
       - run: go test -v -coverprofile=profile.cov ./...
 
       - name: Send coverage