diff --git a/.github/workflows/_build-iso.yml b/.github/workflows/_build-iso.yml
index 9e55c378..92f3af40 100644
--- a/.github/workflows/_build-iso.yml
+++ b/.github/workflows/_build-iso.yml
@@ -24,7 +24,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
 
       - name: Get Flatpak dependencies
         id: flatpak-dependencies
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index edf72e71..ef360ae2 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -41,7 +41,7 @@ jobs:
       base-image-tag: ${{ steps.generate-image-tags.outputs.primary-tag }}
     steps:
       - name: Checkout
-        uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
 
       - name: Maximize build space
         uses: ublue-os/remove-unwanted-software@v7
@@ -138,7 +138,7 @@ jobs:
       COREOS_KERNEL: "N/A"
     steps:
       - name: Checkout
-        uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
 
       - name: Maximize build space
         uses: ublue-os/remove-unwanted-software@v7
@@ -239,7 +239,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
 
       - name: Check Job Status
         uses: ./.github/actions/check-jobs-success
diff --git a/.github/workflows/pre-commit.yml b/.github/workflows/pre-commit.yml
index 800d5547..93e2465d 100644
--- a/.github/workflows/pre-commit.yml
+++ b/.github/workflows/pre-commit.yml
@@ -17,7 +17,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
 
       - name: Run pre-commit
         uses: ./.github/actions/run-pre-commit
diff --git a/.github/workflows/renovate.yml b/.github/workflows/renovate.yml
index 32d417b8..9836879c 100644
--- a/.github/workflows/renovate.yml
+++ b/.github/workflows/renovate.yml
@@ -17,7 +17,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
 
       - name: Validate Renovate Configuration
         uses: ./.github/actions/validate-renovate-config
diff --git a/.github/workflows/sign-image.yml b/.github/workflows/sign-image.yml
index ff5e3388..e565818c 100644
--- a/.github/workflows/sign-image.yml
+++ b/.github/workflows/sign-image.yml
@@ -15,7 +15,7 @@ jobs:
       packages: write
     steps:
       - name: Checkout code
-        uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
 
       - name: Login to GHCR
         uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3