diff --git a/.github/workflows/dependency-review-reusable.yml b/.github/workflows/dependency-review-reusable.yml
index 934247a..0669f8d 100644
--- a/.github/workflows/dependency-review-reusable.yml
+++ b/.github/workflows/dependency-review-reusable.yml
@@ -46,7 +46,7 @@ jobs:
           egress-policy: audit
 
       - name: Checkout repository
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
 
diff --git a/.github/workflows/lint-and-format.yml b/.github/workflows/lint-and-format.yml
index 5803fae..123193f 100644
--- a/.github/workflows/lint-and-format.yml
+++ b/.github/workflows/lint-and-format.yml
@@ -46,7 +46,7 @@ jobs:
           egress-policy: audit
 
       - name: Checkout repository
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: Setup Bun
         uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2.2.0
diff --git a/.github/workflows/osv-scanner-full-reusable.yml b/.github/workflows/osv-scanner-full-reusable.yml
index 7b6b418..3d7f2b6 100644
--- a/.github/workflows/osv-scanner-full-reusable.yml
+++ b/.github/workflows/osv-scanner-full-reusable.yml
@@ -58,7 +58,7 @@ jobs:
           egress-policy: audit
 
       - name: Checkout repository
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
           submodules: ${{ inputs.checkout-submodules }}
diff --git a/.github/workflows/osv-scanner-pr-reusable.yml b/.github/workflows/osv-scanner-pr-reusable.yml
index 876a4bb..baae90d 100644
--- a/.github/workflows/osv-scanner-pr-reusable.yml
+++ b/.github/workflows/osv-scanner-pr-reusable.yml
@@ -48,7 +48,7 @@ jobs:
           egress-policy: audit
 
       - name: Checkout repository
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           fetch-depth: 0
           submodules: ${{ inputs.checkout-submodules }}
diff --git a/.github/workflows/scorecard-reusable.yml b/.github/workflows/scorecard-reusable.yml
index 7b24ff5..fd401b2 100644
--- a/.github/workflows/scorecard-reusable.yml
+++ b/.github/workflows/scorecard-reusable.yml
@@ -81,7 +81,7 @@ jobs:
           egress-policy: audit
 
       - name: "Checkout code"
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false