diff --git a/.github/workflows/renovate.yml b/.github/workflows/renovate.yml
index 734d9ae..b5e74ce 100644
--- a/.github/workflows/renovate.yml
+++ b/.github/workflows/renovate.yml
@@ -12,7 +12,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v3.5.3
+        uses: actions/checkout@v3.7.0
       - name: Self-hosted Renovate
         uses: renovatebot/github-action@v39.0.1
         with:
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index e39a47a..7ac0689 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -32,7 +32,7 @@ jobs:
 
     steps:
       - name: "Checkout code"
-        uses: actions/checkout@93ea575cb5d8a053eaa0ac8fa3b40d7e05a33cc8 # v3.1.0
+        uses: actions/checkout@a37ce9120846195fa4ece8f58b268e6043cb2f26 # v3.7.0
         with:
           persist-credentials: false