diff --git a/.github/workflows/base-images.yaml b/.github/workflows/base-images.yaml
index 23100a295..7a70cb1a1 100644
--- a/.github/workflows/base-images.yaml
+++ b/.github/workflows/base-images.yaml
@@ -29,7 +29,7 @@ jobs:
       max-parallel: 1
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       # https://github.com/docker/setup-qemu-action
       - name: Set up QEMU
diff --git a/.github/workflows/check-latest-images.yaml b/.github/workflows/check-latest-images.yaml
index 9bd7883da..de8a394aa 100644
--- a/.github/workflows/check-latest-images.yaml
+++ b/.github/workflows/check-latest-images.yaml
@@ -19,7 +19,7 @@ jobs:
             latest-release-url: https://quay.io/api/v1/repository/containers/buildah/tag/
     steps:
       - name: Checkout code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
       - name: Check and modify ${{ matrix.image }}
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index d241e8fe4..446555180 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -22,7 +22,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check out code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
       - name: Login to container registry
         run: echo ${{ secrets.GITHUB_TOKEN }} | docker login -u ${{ github.repository_owner }} --password-stdin ghcr.io
       - name: Install Go
@@ -53,7 +53,7 @@ jobs:
           - image: git
             dockerfile: Dockerfile.ubi9
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - name: Set up QEMU
         uses: docker/setup-qemu-action@v4
       - name: Set up Docker Buildx
@@ -87,7 +87,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check out code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
       - name: Install Go
         uses: actions/setup-go@v6
         with:
@@ -169,7 +169,7 @@ jobs:
     runs-on: oracle-vm-16cpu-64gb-x86-64
     steps:
       - name: Check out code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
       - name: Install Go
         uses: actions/setup-go@v6
         with:
diff --git a/.github/workflows/cleanup-nightly-assets.yaml b/.github/workflows/cleanup-nightly-assets.yaml
index de29eb397..e070678ee 100644
--- a/.github/workflows/cleanup-nightly-assets.yaml
+++ b/.github/workflows/cleanup-nightly-assets.yaml
@@ -13,7 +13,7 @@ jobs:
       contents: write  # To be able to update releases.
 
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v7
     - name: Get current month
       id: currentmonth
       run: echo "date=$(date +'%Y-%m')" >> $GITHUB_OUTPUT
diff --git a/.github/workflows/nightly.yaml b/.github/workflows/nightly.yaml
index c8516c008..911fb0995 100644
--- a/.github/workflows/nightly.yaml
+++ b/.github/workflows/nightly.yaml
@@ -19,7 +19,7 @@ jobs:
       IMAGE_NAMESPACE: ${{ github.repository }}
 
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v7
     - uses: actions/setup-go@v6
       with:
         go-version: '1.26.x'
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 68c3a0980..26f6dc026 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -31,7 +31,7 @@ jobs:
     - name: Setup release ${{ inputs.release }}
       run: |
         echo "Creating release ${{ inputs.release }} from previous tag ${{ inputs.tags }} with ref ${{ inputs.git-ref }}"
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v7
       with:
         ref: ${{ inputs.git-ref }}
         fetch-depth: 0  # Fetch all history, needed for release note generation.
diff --git a/.github/workflows/report-release-vulnerabilities.yaml b/.github/workflows/report-release-vulnerabilities.yaml
index 75f2b49b2..4196690c4 100644
--- a/.github/workflows/report-release-vulnerabilities.yaml
+++ b/.github/workflows/report-release-vulnerabilities.yaml
@@ -15,7 +15,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           path: main
       - name: Install Go
@@ -57,7 +57,7 @@ jobs:
         run: ./.github/download-latest-release.sh
         working-directory: ${{ github.workspace }}/main
       - name: Checkout release branch
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           path: release-branch
           ref: ${{ steps.download-latest-release.outputs.release-branch }}
diff --git a/.github/workflows/update-tekton-version.yaml b/.github/workflows/update-tekton-version.yaml
index cdd0e316a..ace6ee0b2 100644
--- a/.github/workflows/update-tekton-version.yaml
+++ b/.github/workflows/update-tekton-version.yaml
@@ -16,7 +16,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           path: go/src/github.com/shipwright-io/build
           token: ${{ secrets.SHIPWRIGHT_BUILD_WRITE_WORKFLOWS }}
diff --git a/.github/workflows/verify.yaml b/.github/workflows/verify.yaml
index 4d9d688eb..395d32e65 100644
--- a/.github/workflows/verify.yaml
+++ b/.github/workflows/verify.yaml
@@ -21,7 +21,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Checkout code
-      uses: actions/checkout@v6
+      uses: actions/checkout@v7
       with:
         path: go/src/github.com/shipwright-io/build
     - name: Install Go