diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index ff9f1a30f..af8170298 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -25,7 +25,7 @@ jobs:
     name: Check syntax (super-linter)
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v3.1.0
       - name: Run super-linter validation
         uses: github/super-linter@v4
         env:
diff --git a/.github/workflows/on-demand_molecule.yml b/.github/workflows/on-demand_molecule.yml
index 9f1acde81..221d6fda2 100644
--- a/.github/workflows/on-demand_molecule.yml
+++ b/.github/workflows/on-demand_molecule.yml
@@ -38,7 +38,7 @@ jobs:
       add-accounts: ${{ steps.filter.outputs.add-accounts }}
       configure: ${{ steps.filter.outputs.configure }}
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v3.1.0
       - uses: dorny/paths-filter@v2
         if: ${{ !env.ACT }}
         id: filter
@@ -65,7 +65,7 @@ jobs:
     name: Check Bootstrap Ansible role
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3.1.0
       - uses: ./.github/actions/setup-molecule
         with:
           ansible-role: bootstrap
@@ -75,7 +75,7 @@ jobs:
     name: Check Genesis Ansible role
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3.1.0
       - uses: ./.github/actions/setup-molecule
         with:
           ansible-role: genesis
@@ -85,7 +85,7 @@ jobs:
     name: Check Add accounts Ansible role
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3.1.0
       - uses: ./.github/actions/setup-molecule
         with:
           ansible-role: add-accounts
@@ -95,7 +95,7 @@ jobs:
     name: Check Configure Ansible role
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3.1.0
       - uses: ./.github/actions/setup-molecule
         with:
           ansible-role: configure
diff --git a/.github/workflows/on-demand_terraform.yml b/.github/workflows/on-demand_terraform.yml
index 8898d1bb8..d0e6d0380 100644
--- a/.github/workflows/on-demand_terraform.yml
+++ b/.github/workflows/on-demand_terraform.yml
@@ -32,7 +32,7 @@ jobs:
     name: Check static code (checkov)
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v3.1.0
       - name: Run Checkov action
         uses: bridgecrewio/checkov-action@master
         with:
@@ -44,14 +44,14 @@ jobs:
   check-lint:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v3.1.0
       - name: Lint Terraform
         uses: actionshub/terraform-lint@main
   check-terrascan:
     runs-on: ubuntu-latest
     name: terrascan-action
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v3.1.0
       - name: Run Terrascan
         id: terrascan
         uses: accurics/terrascan-action@main
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index b6a2144b8..f3a8c39b0 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -35,7 +35,7 @@ jobs:
       upload_url: ${{ steps.release_info.outputs.upload_url }}
 
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3.1.0
 
       - name: Get current version
         id: current_version
@@ -134,7 +134,7 @@ jobs:
           go-version: ^1.16
 
       - name: Check out code into the Go module directory
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3.1.0
 
       - uses: actions/cache@v3
         with:
diff --git a/.github/workflows/verify.yml b/.github/workflows/verify.yml
index c5dc25ea3..ba488e34e 100644
--- a/.github/workflows/verify.yml
+++ b/.github/workflows/verify.yml
@@ -34,7 +34,7 @@ jobs:
       docs: ${{ steps.filter.outputs.docs }}
       workflows: ${{ steps.filter.outputs.workflows }}
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v3.1.0
       - uses: dorny/paths-filter@v2
         if: ${{ !env.ACT }}
         id: filter
@@ -59,7 +59,7 @@ jobs:
     needs:
       - changes
     steps:
-      - uses: actions/checkout@master
+      - uses: actions/checkout@v3.1.0
       - uses: reviewdog/action-actionlint@v1
   links:
     if: needs.changes.outputs.docs == 'true'
@@ -68,7 +68,7 @@ jobs:
     needs:
       - changes
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v3.1.0
       - uses: gaurav-nelson/github-action-markdown-link-check@v1
   spell:
     if: needs.changes.outputs.docs == 'true'
@@ -77,7 +77,7 @@ jobs:
     needs:
       - changes
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v3.1.0
       - uses: rojopolis/spellcheck-github-actions@0.24.0
   unit-tests:
     name: Check unit tests
@@ -88,7 +88,7 @@ jobs:
       - uses: actions/setup-go@v3
         with:
           go-version: ^1.17
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v3.1.0
       - uses: actions/cache@v3
         if: ${{ !env.ACT }}
         with:
@@ -114,7 +114,7 @@ jobs:
       - uses: actions/setup-go@v3
         with:
           go-version: ^1.17
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v3.1.0
       - uses: actions/cache@v3
         with:
           path: |
@@ -133,7 +133,7 @@ jobs:
     needs:
       - changes
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v3.1.0
       - uses: actions/setup-go@v3
         with:
           go-version: 1.17