diff --git a/.github/workflows/freeze-for-pr.yml b/.github/workflows/freeze-for-pr.yml
index 331c40f22..93920338d 100644
--- a/.github/workflows/freeze-for-pr.yml
+++ b/.github/workflows/freeze-for-pr.yml
@@ -15,7 +15,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8
         with:
           submodules: "true"
 
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index 4c837efcf..74d6b91e7 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -18,7 +18,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8
         with:
           submodules: "true"
 
diff --git a/.github/workflows/pr-docs.yml b/.github/workflows/pr-docs.yml
index 1aa95b451..819b2e89b 100644
--- a/.github/workflows/pr-docs.yml
+++ b/.github/workflows/pr-docs.yml
@@ -22,7 +22,7 @@ jobs:
 
     steps:
       - name: Fetch merge branch
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8
         with:
           ref: ${{ github.event.pull_request.head.sha }}
           repository: ${{ github.event.pull_request.head.repo.full_name }}
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index b1065b0a9..d490c643f 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -18,7 +18,7 @@ jobs:
       id-token: write
 
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8
         with:
           submodules: "true"
 
diff --git a/.github/workflows/py-test.yml b/.github/workflows/py-test.yml
index 017c48c07..b769b6e83 100644
--- a/.github/workflows/py-test.yml
+++ b/.github/workflows/py-test.yml
@@ -24,7 +24,7 @@ jobs:
     runs-on: ${{ matrix.os }}
 
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8
         with:
           submodules: "true"
 
@@ -43,7 +43,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8
         with:
           submodules: "true"
 
diff --git a/.github/workflows/reformat.yml b/.github/workflows/reformat.yml
index 34ddcb553..5c47742b5 100644
--- a/.github/workflows/reformat.yml
+++ b/.github/workflows/reformat.yml
@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8
         with:
           submodules: "true"
 
diff --git a/.github/workflows/release-docs.yml b/.github/workflows/release-docs.yml
index e06af0f53..7496e5b35 100644
--- a/.github/workflows/release-docs.yml
+++ b/.github/workflows/release-docs.yml
@@ -9,7 +9,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8
         with:
           submodules: "true"
 
diff --git a/.github/workflows/resync-piped.yml b/.github/workflows/resync-piped.yml
index 8f8bba4f9..1ca725ff4 100644
--- a/.github/workflows/resync-piped.yml
+++ b/.github/workflows/resync-piped.yml
@@ -15,7 +15,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8
         with:
           submodules: "true"
 
diff --git a/.github/workflows/type-check.yml b/.github/workflows/type-check.yml
index 2593d5d54..a1d1eeba9 100644
--- a/.github/workflows/type-check.yml
+++ b/.github/workflows/type-check.yml
@@ -18,7 +18,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8
         with:
           submodules: "true"
 
diff --git a/.github/workflows/update-licence.yml b/.github/workflows/update-licence.yml
index bfb680067..8e0f3ae7d 100644
--- a/.github/workflows/update-licence.yml
+++ b/.github/workflows/update-licence.yml
@@ -10,7 +10,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8
         with:
           submodules: "true"
 
diff --git a/.github/workflows/upgrade-locks.yml b/.github/workflows/upgrade-locks.yml
index 99ca75e1b..65078e22e 100644
--- a/.github/workflows/upgrade-locks.yml
+++ b/.github/workflows/upgrade-locks.yml
@@ -10,7 +10,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8
         with:
           submodules: "true"
 
diff --git a/.github/workflows/verify-types.yml b/.github/workflows/verify-types.yml
index c9c804c75..ceddfda8b 100644
--- a/.github/workflows/verify-types.yml
+++ b/.github/workflows/verify-types.yml
@@ -18,7 +18,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8
         with:
           submodules: "true"