diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index f439c7d..411e2c8 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -17,7 +17,7 @@ jobs:
     runs-on: ubuntu-latest
     
     steps:
-      - uses: actions/checkout@900f2210b1d28bbbd0bd22d17926b9e224e8f231 # v6.0.1
+      - uses: actions/checkout@4f1f4aec02e41874fa0262ea8ff5172d7978ad1e # v6.0.1
       
       - name: Setup Deno
         uses: denoland/setup-deno@667a34cdef165d8d2b2e98dde39547c9daac7282 # v2
@@ -41,7 +41,7 @@ jobs:
     runs-on: ubuntu-latest
     
     steps:
-      - uses: actions/checkout@900f2210b1d28bbbd0bd22d17926b9e224e8f231 # v6.0.1
+      - uses: actions/checkout@4f1f4aec02e41874fa0262ea8ff5172d7978ad1e # v6.0.1
       
       - name: Setup Deno
         uses: denoland/setup-deno@667a34cdef165d8d2b2e98dde39547c9daac7282 # v2
@@ -56,7 +56,7 @@ jobs:
     runs-on: ubuntu-latest
     
     steps:
-      - uses: actions/checkout@900f2210b1d28bbbd0bd22d17926b9e224e8f231 # v6.0.1
+      - uses: actions/checkout@4f1f4aec02e41874fa0262ea8ff5172d7978ad1e # v6.0.1
       
       - name: Initialize CodeQL
         uses: github/codeql-action/init@7211b7c8077ea37d8641b6271f6a365a22a5fbfa # v3
diff --git a/.github/workflows/quality.yml b/.github/workflows/quality.yml
index 78f5544..9aaf599 100644
--- a/.github/workflows/quality.yml
+++ b/.github/workflows/quality.yml
@@ -16,7 +16,7 @@ jobs:
     runs-on: ubuntu-latest
     
     steps:
-      - uses: actions/checkout@900f2210b1d28bbbd0bd22d17926b9e224e8f231 # v6.0.1
+      - uses: actions/checkout@4f1f4aec02e41874fa0262ea8ff5172d7978ad1e # v6.0.1
       
       - name: Setup Deno
         uses: denoland/setup-deno@667a34cdef165d8d2b2e98dde39547c9daac7282 # v2
diff --git a/.github/workflows/rsr-antipattern.yml b/.github/workflows/rsr-antipattern.yml
index c4cb2c3..ceb1524 100644
--- a/.github/workflows/rsr-antipattern.yml
+++ b/.github/workflows/rsr-antipattern.yml
@@ -23,7 +23,7 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: actions/checkout@900f2210b1d28bbbd0bd22d17926b9e224e8f231 # v6.0.2
+      - uses: actions/checkout@4f1f4aec02e41874fa0262ea8ff5172d7978ad1e # v6.0.2
 
       - name: Check for TypeScript
         run: |
diff --git a/.github/workflows/workflow-linter.yml b/.github/workflows/workflow-linter.yml
index b1980e1..a367bc2 100644
--- a/.github/workflows/workflow-linter.yml
+++ b/.github/workflows/workflow-linter.yml
@@ -22,7 +22,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@900f2210b1d28bbbd0bd22d17926b9e224e8f231 # v6.0.1
+        uses: actions/checkout@4f1f4aec02e41874fa0262ea8ff5172d7978ad1e # v6.0.1
 
       - name: Check SPDX Headers
         run: |
@@ -73,7 +73,7 @@ jobs:
             echo "$unpinned"
             echo ""
             echo "Replace version tags with SHA pins, e.g.:"
-            echo "  uses: actions/checkout@900f2210b1d28bbbd0bd22d17926b9e224e8f231 # v4.1.1"
+            echo "  uses: actions/checkout@4f1f4aec02e41874fa0262ea8ff5172d7978ad1e # v4.1.1"
             exit 1
           fi
           echo "All actions are SHA-pinned"