diff --git a/.github/workflows/check-nix-format.yml b/.github/workflows/check-nix-format.yml
index a5b100bad..fb4f536d5 100644
--- a/.github/workflows/check-nix-format.yml
+++ b/.github/workflows/check-nix-format.yml
@@ -19,7 +19,7 @@ jobs:
     name: nixfmt-check
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
+      - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5
         with:
           fetch-depth: 2
       - name: Calculate changed files
diff --git a/.github/workflows/pr.yml b/.github/workflows/pr.yml
index c6f0c88f3..5fe730b3b 100644
--- a/.github/workflows/pr.yml
+++ b/.github/workflows/pr.yml
@@ -10,7 +10,7 @@ jobs:
   tests:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
+    - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5
     - uses: cachix/install-nix-action@4e002c8ec80594ecd40e759629461e26c8abed15 # v31
       with:
         nix_path: nixpkgs=channel:nixos-unstable
diff --git a/.github/workflows/update.yml b/.github/workflows/update.yml
index b8e1ea51c..5ccc41227 100644
--- a/.github/workflows/update.yml
+++ b/.github/workflows/update.yml
@@ -23,7 +23,7 @@ jobs:
         application_private_key: '${{ secrets.GH_APPLICATION_PRIVATE_KEY }}'
         permissions: "contents:write"
         revoke_token: true
-    - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
+    - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5
     - uses: cachix/install-nix-action@4e002c8ec80594ecd40e759629461e26c8abed15 # v31
       with:
         nix_path: nixpkgs=channel:nixos-unstable