diff --git a/.github/workflows/release-drafter.yaml b/.github/workflows/release-drafter.yaml
index 3919652..fdbc5da 100644
--- a/.github/workflows/release-drafter.yaml
+++ b/.github/workflows/release-drafter.yaml
@@ -20,7 +20,7 @@ jobs:
       #    echo "GHE_HOST=${GITHUB_SERVER_URL##https:\/\/}" >> $GITHUB_ENV
 
       - name: Checkout code
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
       - uses: dorny/paths-filter@v2
         id: changes
         with:
diff --git a/.github/workflows/secretlint.yml b/.github/workflows/secretlint.yml
index 540a05a..a64a965 100644
--- a/.github/workflows/secretlint.yml
+++ b/.github/workflows/secretlint.yml
@@ -20,12 +20,12 @@ jobs:
     if: (github.actor != 'dependabot[bot]')
     steps:
       - name: Check out code
-        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
+        uses: actions/checkout@v4 # v3.5.3
         with:
           fetch-depth: 0
       - uses: reviewdog/action-setup@80a06617492b461a66508e2dedf16233f0506804 # v1.0.6
       - id: changed-files
-        uses: tj-actions/changed-files@0fc9663aa70243d87319dbd32fd926344d18d38f # v38.2.0
+        uses: tj-actions/changed-files@48566bbcc22ceb7c5809ebdd27377309f2c3de8c # v39.0.0
       - name: Run secretlint
         if: steps.changed-files.outputs.all_changed_files_count != '0'
         env:
diff --git a/.github/workflows/semgrep.yml b/.github/workflows/semgrep.yml
index 6284b4f..133834a 100644
--- a/.github/workflows/semgrep.yml
+++ b/.github/workflows/semgrep.yml
@@ -20,12 +20,12 @@ jobs:
     if: (github.actor != 'dependabot[bot]')
     steps:
       - name: Check out code
-        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
+        uses: actions/checkout@v4 # v3.5.3
         with:
           fetch-depth: 0
       - uses: reviewdog/action-setup@80a06617492b461a66508e2dedf16233f0506804 # v1.0.6
       - id: changed-files
-        uses: tj-actions/changed-files@0fc9663aa70243d87319dbd32fd926344d18d38f # v38.2.0
+        uses: tj-actions/changed-files@48566bbcc22ceb7c5809ebdd27377309f2c3de8c # v39.0.0
       - id: run-semgrep
         if: steps.changed-files.outputs.all_changed_files_count != '0'
         name: Run semgrep
diff --git a/.github/workflows/test-aws.yaml b/.github/workflows/test-aws.yaml
index 9e0f3e0..a98a3bb 100644
--- a/.github/workflows/test-aws.yaml
+++ b/.github/workflows/test-aws.yaml
@@ -30,7 +30,7 @@ jobs:
     timeout-minutes: 5
     steps:
       - name: Checkout code
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/test-cerrors.yaml b/.github/workflows/test-cerrors.yaml
index b5adf63..523a939 100644
--- a/.github/workflows/test-cerrors.yaml
+++ b/.github/workflows/test-cerrors.yaml
@@ -31,7 +31,7 @@ jobs:
           go-version: ${{ matrix.go-version }}
 
       - name: Checkout code
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
 
       - name: Go Module Download
         working-directory: ${{ env.testdir }}
diff --git a/.github/workflows/test-envlookup.yaml b/.github/workflows/test-envlookup.yaml
index 624a877..3127339 100644
--- a/.github/workflows/test-envlookup.yaml
+++ b/.github/workflows/test-envlookup.yaml
@@ -31,7 +31,7 @@ jobs:
           go-version: ${{ matrix.go-version }}
 
       - name: Checkout code
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
 
       - name: Go Module Download
         working-directory: ${{ env.testdir }}
diff --git a/.github/workflows/test-utf8bom.yaml b/.github/workflows/test-utf8bom.yaml
index 9054cde..f489540 100644
--- a/.github/workflows/test-utf8bom.yaml
+++ b/.github/workflows/test-utf8bom.yaml
@@ -31,7 +31,7 @@ jobs:
           go-version: ${{ matrix.go-version }}
 
       - name: Checkout code
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
 
       - name: Go Module Download
         working-directory: ${{ env.testdir }}