diff --git a/.github/workflows/build-push-cft-devtools.yml b/.github/workflows/build-push-cft-devtools.yml
index a9f8ce6a7ad..64d0d16e988 100644
--- a/.github/workflows/build-push-cft-devtools.yml
+++ b/.github/workflows/build-push-cft-devtools.yml
@@ -19,7 +19,7 @@ jobs:
       id-token: 'write'
 
     steps:
-      - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
 
       - id: 'auth'
         name: 'Authenticate to Google Cloud'
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index e9fd6a5a142..70ac21adcce 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -50,7 +50,7 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
+      uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
diff --git a/.github/workflows/go-fbf-test.yml b/.github/workflows/go-fbf-test.yml
index 92468aaa4a3..fb7663f99c6 100644
--- a/.github/workflows/go-fbf-test.yml
+++ b/.github/workflows/go-fbf-test.yml
@@ -25,7 +25,7 @@ jobs:
       matrix:
         operating-system: [ubuntu-latest, macos-latest]
     steps:
-    - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
+    - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
     - uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4
       with:
         go-version-file: infra/utils/fbf/go.mod
diff --git a/.github/workflows/go-module-swapper.yml b/.github/workflows/go-module-swapper.yml
index a1d1fbe4fc4..09f6f748d8c 100644
--- a/.github/workflows/go-module-swapper.yml
+++ b/.github/workflows/go-module-swapper.yml
@@ -25,7 +25,7 @@ jobs:
       matrix:
         operating-system: [ubuntu-latest, macos-latest]
     steps:
-    - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
+    - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
     - uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4
       with:
         go-version-file: infra/module-swapper/go.mod
diff --git a/.github/workflows/lint.yaml b/.github/workflows/lint.yaml
index 752a335ade5..84e19e57f7d 100644
--- a/.github/workflows/lint.yaml
+++ b/.github/workflows/lint.yaml
@@ -31,7 +31,7 @@ jobs:
     name: 'lint-infra-terraform'
     runs-on: 'ubuntu-latest'
     steps:
-      - uses: 'actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608' # v4
+      - uses: 'actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11' # v4
       - run: docker run --rm -e EXCLUDE_LINT_DIRS -e EXCLUDE_HEADER_CHECK -v ${{ github.workspace }}:/workspace gcr.io/cloud-foundation-cicd/cft/developer-tools:1 /usr/local/bin/test_lint.sh
         env:
           EXCLUDE_LINT_DIRS: '\./dm|\./config-connector|\./cli|\./infra/build|\./infra/utils|\./infra/blueprint-test|\./infra/concourse|\./infra/modules|\./reports|\./.github|\./docs|\./infra/module-swapper'
diff --git a/.github/workflows/pre-commit.yml b/.github/workflows/pre-commit.yml
index 97664b8ca8e..c29bbc654c0 100644
--- a/.github/workflows/pre-commit.yml
+++ b/.github/workflows/pre-commit.yml
@@ -9,6 +9,6 @@ jobs:
   pre-commit:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
+    - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
     - uses: actions/setup-python@61a6322f88396a6271a6ee3565807d608ecaddd1 # v4
     - uses: pre-commit/action@646c83fcd040023954eafda54b4db0192ce70507 # v3.0.0
diff --git a/.github/workflows/release-cli.yml b/.github/workflows/release-cli.yml
index 90c940598bc..a4ba00d5920 100644
--- a/.github/workflows/release-cli.yml
+++ b/.github/workflows/release-cli.yml
@@ -20,7 +20,7 @@ jobs:
       id-token: 'write'
 
     steps:
-      - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
       - uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4
         with:
           go-version-file: cli/go.mod
diff --git a/.github/workflows/test-cft-devtools.yml b/.github/workflows/test-cft-devtools.yml
index 5764629b965..8b9510d570e 100644
--- a/.github/workflows/test-cft-devtools.yml
+++ b/.github/workflows/test-cft-devtools.yml
@@ -17,7 +17,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
 
       - name: Build
         run: |-
diff --git a/.github/workflows/test-cli.yml b/.github/workflows/test-cli.yml
index 4467c20a004..f8f721da63e 100644
--- a/.github/workflows/test-cli.yml
+++ b/.github/workflows/test-cli.yml
@@ -31,7 +31,7 @@ jobs:
       matrix:
         operating-system: [ubuntu-latest]
     steps:
-    - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
+    - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
     - uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4
       with:
         go-version-file: cli/go.mod