diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index e0f289e1..3ca0e4e0 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -29,7 +29,7 @@ jobs:
       run: sudo apt-get update && sudo apt-get install --yes musl-tools
     - if: ${{ startsWith(matrix.os.version, 'ubuntu-') }}
       run: sudo apt-get update && sudo apt-get install --yes postgresql-client
-    - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       with:
         fetch-depth: 0
     - uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
@@ -161,7 +161,7 @@ jobs:
       run: sudo apt-get update && sudo apt-get install --yes musl-tools
     - if: ${{ matrix.lane.name == 'podman' || matrix.lane.name == 'docker' }}
       run: sudo apt-get update && sudo apt-get install --yes postgresql-client
-    - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       with:
         fetch-depth: 0
     - uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
@@ -237,7 +237,7 @@ jobs:
     runs-on: ${{ matrix.platform.runner }}
     needs: build
     steps:
-    - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       with:
         fetch-depth: 0
 
@@ -282,7 +282,7 @@ jobs:
     runs-on: ${{ matrix.platform.runner }}
     needs: build
     steps:
-    - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       with:
         fetch-depth: 0
 
@@ -318,7 +318,7 @@ jobs:
     permissions:
       contents: write
     steps:
-    - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       with:
         fetch-depth: 0