diff --git a/.github/workflows/analyze.yml b/.github/workflows/analyze.yml
index eeee2d57..60c31eb0 100644
--- a/.github/workflows/analyze.yml
+++ b/.github/workflows/analyze.yml
@@ -15,7 +15,7 @@ jobs:
                 python-version: [3.9]
                 os: [ubuntu-latest]
         steps:
-            - uses: actions/checkout@v4
+            - uses: actions/checkout@v4.2.2
             - name: Set up Python ${{ matrix.python-version }}
               uses: actions/setup-python@v5
               with:
@@ -44,7 +44,7 @@ jobs:
         runs-on: ubuntu-latest
         needs: [Analyze]
         steps:
-            - uses: actions/checkout@v4
+            - uses: actions/checkout@v4.2.2
             - name: Configure AWS credentials for dependabot
               if: ${{ github.actor == 'dependabot[bot]' }}
               uses: aws-actions/configure-aws-credentials@v4
diff --git a/.github/workflows/build-docs.yml b/.github/workflows/build-docs.yml
index f71fcb2e..ff5b2c73 100644
--- a/.github/workflows/build-docs.yml
+++ b/.github/workflows/build-docs.yml
@@ -10,7 +10,7 @@ jobs:
     if: ${{ !contains(github.event.head_commit.message, 'Bump version') }}
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v2.3.1
+    - uses: actions/checkout@v4.2.2
       with:
         persist-credentials: false
     - name: Set up Python
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index ce225566..7730ca10 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -30,7 +30,7 @@ jobs:
         os: [ubuntu-latest, windows-latest, macOS-latest]
 
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v4.2.2
     - name: Set up Python ${{ matrix.python-version }}
       uses: actions/setup-python@v5
       with:
@@ -51,7 +51,7 @@ jobs:
     runs-on: ubuntu-latest
     if: ${{ !contains(github.event.head_commit.message, 'Bump version') }}
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v4.2.2
     - name: Set up Python
       uses: actions/setup-python@v5
       with:
@@ -80,7 +80,7 @@ jobs:
       id-token: write
 
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v4.2.2
     - name: Set up Python
       uses: actions/setup-python@v5
       with:
diff --git a/.github/workflows/cleanup-firebase.yml b/.github/workflows/cleanup-firebase.yml
index fb8f5849..82211fab 100644
--- a/.github/workflows/cleanup-firebase.yml
+++ b/.github/workflows/cleanup-firebase.yml
@@ -12,7 +12,7 @@ jobs:
                 python-version: [3.9]
                 os: [ubuntu-latest, windows-latest, macOS-latest]
         steps:
-            -   uses: actions/checkout@v4
+            -   uses: actions/checkout@v4.2.2
             -   name: Set up Python ${{ matrix.python-version }}
                 uses: actions/setup-python@v5
                 with:
diff --git a/.github/workflows/cleanup.yml b/.github/workflows/cleanup.yml
index 13fc4b52..45428f5b 100644
--- a/.github/workflows/cleanup.yml
+++ b/.github/workflows/cleanup.yml
@@ -9,7 +9,7 @@ jobs:
   cleanup:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v4.2.2
     - name: Configure AWS credentials
       uses: aws-actions/configure-aws-credentials@v4
       with: