diff --git a/.github/workflows/PR-powershell-daily.yml b/.github/workflows/PR-powershell-daily.yml
index e39a4342..e88add6e 100644
--- a/.github/workflows/PR-powershell-daily.yml
+++ b/.github/workflows/PR-powershell-daily.yml
@@ -40,7 +40,7 @@ jobs:
       workflows: ${{ steps.filter.outputs.workflows }}
     steps:
       - name: checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v4.2.2
 
         # For pull requests it's not necessary to checkout the code
       - uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36 # v3.2.0
@@ -64,7 +64,7 @@ jobs:
     runs-on: macos-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v4.2.2
         
       - name: Check for applicable files
         uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36
diff --git a/.github/workflows/PR-powershell-lts.yml b/.github/workflows/PR-powershell-lts.yml
index 3b9a37e7..de848fce 100644
--- a/.github/workflows/PR-powershell-lts.yml
+++ b/.github/workflows/PR-powershell-lts.yml
@@ -38,7 +38,7 @@ jobs:
       workflows: ${{ steps.filter.outputs.workflows }}
     steps:
       - name: checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v4.2.2
 
         # For pull requests it's not necessary to checkout the code
       - uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36 # v3.2.0
@@ -62,7 +62,7 @@ jobs:
     runs-on: macos-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v4.2.2
 
       - name: Prepare Agent
         uses: ./.github/workflows/composite/prep
diff --git a/.github/workflows/PR-powershell-preview.yml b/.github/workflows/PR-powershell-preview.yml
index 630d75c5..c55d5e6a 100644
--- a/.github/workflows/PR-powershell-preview.yml
+++ b/.github/workflows/PR-powershell-preview.yml
@@ -38,7 +38,7 @@ jobs:
       workflows: ${{ steps.filter.outputs.workflows }}
     steps:
       - name: checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v4.2.2
 
         # For pull requests it's not necessary to checkout the code
       - uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36 # v3.2.0
@@ -62,7 +62,7 @@ jobs:
     runs-on: macos-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v4.2.2
         
       - name: Check for applicable files
         uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36
diff --git a/.github/workflows/PR-powershell.yml b/.github/workflows/PR-powershell.yml
index ea1b13cd..294ca1b0 100644
--- a/.github/workflows/PR-powershell.yml
+++ b/.github/workflows/PR-powershell.yml
@@ -40,7 +40,7 @@ jobs:
       workflows: ${{ steps.filter.outputs.workflows }}
     steps:
       - name: checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v4.2.2
 
         # For pull requests it's not necessary to checkout the code
       - uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36 # v3.2.0
@@ -64,7 +64,7 @@ jobs:
     runs-on: macos-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v4.2.2
 
       - name: Check for applicable files
         uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36
diff --git a/.github/workflows/cron-powershell-daily.yml b/.github/workflows/cron-powershell-daily.yml
index 07785443..ba887ccb 100644
--- a/.github/workflows/cron-powershell-daily.yml
+++ b/.github/workflows/cron-powershell-daily.yml
@@ -29,7 +29,7 @@ jobs:
     runs-on: macos-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v4.2.2
 
       - name: Prepare Agent
         uses: ./.github/workflows/composite/prep
diff --git a/.github/workflows/cron-powershell-preview.yml b/.github/workflows/cron-powershell-preview.yml
index 15d86f34..73c14b5b 100644
--- a/.github/workflows/cron-powershell-preview.yml
+++ b/.github/workflows/cron-powershell-preview.yml
@@ -28,7 +28,7 @@ jobs:
     runs-on: macos-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v4.2.2
 
       - name: Prepare Agent
         uses: ./.github/workflows/composite/prep
diff --git a/.github/workflows/cron-powershell.yml b/.github/workflows/cron-powershell.yml
index 05d53786..432c6a5d 100644
--- a/.github/workflows/cron-powershell.yml
+++ b/.github/workflows/cron-powershell.yml
@@ -29,7 +29,7 @@ jobs:
     runs-on: macos-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v4.2.2
 
       - name: Prepare Agent
         uses: ./.github/workflows/composite/prep
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index d13ca10f..b38b363b 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -34,7 +34,7 @@ jobs:
 
     steps:
       - name: "Checkout code"
-        uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0
+        uses: actions/checkout@85e6279cec87321a52edac9c87bce653a07cf6c2 # v2.7.0
         with:
           persist-credentials: false