diff --git a/.github/workflows/ci-gate.yaml b/.github/workflows/ci-gate.yaml
index 46f4a27a..215a9a00 100644
--- a/.github/workflows/ci-gate.yaml
+++ b/.github/workflows/ci-gate.yaml
@@ -44,7 +44,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803  # v6
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1  # v7
         with:
           ref: ${{ github.event.pull_request.head.sha }}
           fetch-depth: 0
diff --git a/.github/workflows/diff-manifests.yaml b/.github/workflows/diff-manifests.yaml
index c22c0fd3..f2036f44 100644
--- a/.github/workflows/diff-manifests.yaml
+++ b/.github/workflows/diff-manifests.yaml
@@ -38,7 +38,7 @@ jobs:
       - filter-changes
     steps:
       - name: Checkout
-        uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
         with:
           persist-credentials: false
 
diff --git a/.github/workflows/lint.yaml b/.github/workflows/lint.yaml
index 5c037a06..d811afb1 100644
--- a/.github/workflows/lint.yaml
+++ b/.github/workflows/lint.yaml
@@ -28,7 +28,7 @@ jobs:
             **/*.yml
       - name: Checkout
         if: steps.changed-files.outputs.changed_files != '[]'
-        uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
         with:
           persist-credentials: false
       - name: Install tools
@@ -51,7 +51,7 @@ jobs:
             **/*.json5
       - name: Checkout
         if: steps.changed-files.outputs.changed_files != '[]'
-        uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
         with:
           persist-credentials: false
       - name: Install tools
@@ -74,7 +74,7 @@ jobs:
             .github/workflows/*.yml
       - name: Checkout
         if: steps.changed-files.outputs.changed_files != '[]'
-        uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
         with:
           persist-credentials: false
       - name: Install tools
@@ -96,7 +96,7 @@ jobs:
             **/*.md
       - name: Checkout
         if: steps.changed-files.outputs.changed_files != '[]'
-        uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
         with:
           persist-credentials: false
       - name: Install tools
@@ -111,7 +111,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
         with:
           persist-credentials: false
       - name: Install tools
diff --git a/.github/workflows/update-xseed.yaml b/.github/workflows/update-xseed.yaml
index bef0038a..1f012a68 100644
--- a/.github/workflows/update-xseed.yaml
+++ b/.github/workflows/update-xseed.yaml
@@ -19,7 +19,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803  # v6
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1  # v7
         with:
           fetch-depth: 0
           token: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/validate-manifests.yaml b/.github/workflows/validate-manifests.yaml
index c0b0bc58..c5912eb4 100644
--- a/.github/workflows/validate-manifests.yaml
+++ b/.github/workflows/validate-manifests.yaml
@@ -37,7 +37,7 @@ jobs:
       - filter-changes
     steps:
       - name: Checkout
-        uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
         with:
           persist-credentials: false
 
@@ -55,7 +55,7 @@ jobs:
       - filter-changes
     steps:
       - name: Checkout
-        uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
         with:
           persist-credentials: false
 
@@ -73,7 +73,7 @@ jobs:
       - filter-changes
     steps:
       - name: Checkout
-        uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
         with:
           persist-credentials: false