diff --git a/.github/workflows/preview.yml b/.github/workflows/preview.yml
index 678ec86..6843474 100644
--- a/.github/workflows/preview.yml
+++ b/.github/workflows/preview.yml
@@ -13,9 +13,8 @@ jobs:
     name: Static Analysis
     steps:
       - name: Checkout
-        # for security reasons we pin commit ids and not tags.
-        # actions/checkout@v3.0.2 -> 2541b1294d2704b0964813337f33b291d3f8596b
-        uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b
+        # actions/checkout@v4.1.1
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
         with:
           fetch-depth: 0
 
@@ -64,9 +63,8 @@ jobs:
     name: Unit Tests
     steps:
       - name: Checkout
-        # for security reasons we pin commit ids and not tags.
-        # actions/checkout@v3.0.2 -> 2541b1294d2704b0964813337f33b291d3f8596b
-        uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b
+        # actions/checkout@v4.1.1
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 274b651..8fb4901 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -15,9 +15,8 @@ jobs:
     name: Static Analysis
     steps:
       - name: Checkout
-        # for security reasons we pin commit ids and not tags.
-        # actions/checkout@v3.0.2 -> 2541b1294d2704b0964813337f33b291d3f8596b
-        uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b
+        # actions/checkout@v4.1.1
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
         with:
           fetch-depth: 0
 
@@ -66,9 +65,8 @@ jobs:
     name: Unit Tests
     steps:
       - name: Checkout
-        # for security reasons we pin commit ids and not tags.
-        # actions/checkout@v3.0.2 -> 2541b1294d2704b0964813337f33b291d3f8596b
-        uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b
+        # actions/checkout@v4.1.1
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
         with:
           fetch-depth: 0
 
@@ -102,8 +100,8 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        # actions/checkout@v3.0.2
-        uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b
+        # actions/checkout@v4.1.1
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
         with:
           fetch-depth: 0
 
diff --git a/iam.tf b/iam.tf
index 6b95bf6..8c83e0d 100644
--- a/iam.tf
+++ b/iam.tf
@@ -15,7 +15,7 @@ locals {
 }
 
 module "iam" {
-  source = "github.com/mineiros-io/terraform-google-project-iam?ref=v0.3.0"
+  source = "github.com/mineiros-io/terraform-google-project-iam?ref=v0.4.0"
 
   for_each = local.iam_map