diff --git a/.github/workflows/build-extra.yml b/.github/workflows/build-extra.yml
index 0d53b270d..4f5fc5049 100644
--- a/.github/workflows/build-extra.yml
+++ b/.github/workflows/build-extra.yml
@@ -30,7 +30,7 @@ jobs:
   build-clang:
     runs-on: ubuntu-20.04
     steps:
-    - uses: actions/checkout@a12a3943b4bdde767164f792f33f40b04645d846
+    - uses: actions/checkout@dcd71f646680f2efd8db4afa5ad64fdcba30e748
     - name: configure
       run: CC=clang-11 ./configure --enable-fatal-warnings
     - name: make
@@ -38,7 +38,7 @@ jobs:
   scan-build:
     runs-on: ubuntu-20.04
     steps:
-    - uses: actions/checkout@a12a3943b4bdde767164f792f33f40b04645d846
+    - uses: actions/checkout@dcd71f646680f2efd8db4afa5ad64fdcba30e748
     - name: install clang-tools-11
       run: sudo apt-get install clang-tools-11
     - name: configure
@@ -48,7 +48,7 @@ jobs:
   cppcheck:
     runs-on: ubuntu-20.04
     steps:
-    - uses: actions/checkout@a12a3943b4bdde767164f792f33f40b04645d846
+    - uses: actions/checkout@dcd71f646680f2efd8db4afa5ad64fdcba30e748
     - name: install cppcheck
       run: sudo apt-get install cppcheck
     - name: cppcheck
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 6219abc2f..4d54b5178 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -22,7 +22,7 @@ jobs:
   build_and_test:
     runs-on: ubuntu-20.04
     steps:
-    - uses: actions/checkout@a12a3943b4bdde767164f792f33f40b04645d846
+    - uses: actions/checkout@dcd71f646680f2efd8db4afa5ad64fdcba30e748
     - name: install dependencies
       run: sudo apt-get install gcc-11 libapparmor-dev libselinux1-dev expect xzdec
     - name: configure
diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index 55ed5e71b..69fc8834b 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -43,7 +43,7 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@a12a3943b4bdde767164f792f33f40b04645d846
+      uses: actions/checkout@dcd71f646680f2efd8db4afa5ad64fdcba30e748
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
diff --git a/.github/workflows/profile-checks.yml b/.github/workflows/profile-checks.yml
index c2a3c5dc7..59997db2f 100644
--- a/.github/workflows/profile-checks.yml
+++ b/.github/workflows/profile-checks.yml
@@ -20,7 +20,7 @@ jobs:
   profile-checks:
     runs-on: ubuntu-20.04
     steps:
-    - uses: actions/checkout@a12a3943b4bdde767164f792f33f40b04645d846
+    - uses: actions/checkout@dcd71f646680f2efd8db4afa5ad64fdcba30e748
     - name: sort.py
       run: ./ci/check/profiles/sort.py etc/inc/*.inc etc/{profile-a-l,profile-m-z}/*.profile
     - name: private-etc-always-required.sh