diff --git a/.github/workflows/documentation.yml b/.github/workflows/documentation.yml
index d3b41b4eb25f51..bf4d3e50bfd2c0 100644
--- a/.github/workflows/documentation.yml
+++ b/.github/workflows/documentation.yml
@@ -23,7 +23,7 @@ jobs:
     - name: Set up Virtualenv
       run: pip install virtualenv
     - name: Checkout
-      uses: actions/checkout@v2
+      uses: actions/checkout@v3.1.0
       with:
         fetch-depth: 50
     - name: Run website_build.sh
diff --git a/.github/workflows/epochs.yml b/.github/workflows/epochs.yml
index a605a818c5f390..9fa02a67821ae1 100644
--- a/.github/workflows/epochs.yml
+++ b/.github/workflows/epochs.yml
@@ -9,7 +9,7 @@ jobs:
     runs-on: ubuntu-18.04
     steps:
     - name: Checkout
-      uses: actions/checkout@v1
+      uses: actions/checkout@v3.1.0
     - name: Run epochs_update.sh
       # Use a conditional step instead of a conditional job to work around #20700.
       if: github.repository == 'web-platform-tests/wpt'
diff --git a/.github/workflows/interfaces.yml b/.github/workflows/interfaces.yml
index 969209c6fc3030..29d59d9cf6e770 100644
--- a/.github/workflows/interfaces.yml
+++ b/.github/workflows/interfaces.yml
@@ -9,7 +9,7 @@ jobs:
     runs-on: ubuntu-20.04
     steps:
     - name: Checkout
-      uses: actions/checkout@v2
+      uses: actions/checkout@v3.1.0
     - name: Run interfaces_update.sh
       run: ./tools/ci/interfaces_update.sh
     - name: Create pull request
diff --git a/.github/workflows/manifest.yml b/.github/workflows/manifest.yml
index 3210c703b1d8f8..a5e11a1c8f2c0e 100644
--- a/.github/workflows/manifest.yml
+++ b/.github/workflows/manifest.yml
@@ -15,7 +15,7 @@ jobs:
       with:
         python-version: '3.x'
     - name: Checkout
-      uses: actions/checkout@v1
+      uses: actions/checkout@v3.1.0
       with:
         fetch-depth: 50
     - name: Install dependencies
diff --git a/.github/workflows/regen_certs.yml b/.github/workflows/regen_certs.yml
index 33699d833aad7c..73727eb61c1148 100644
--- a/.github/workflows/regen_certs.yml
+++ b/.github/workflows/regen_certs.yml
@@ -13,7 +13,7 @@ jobs:
       with:
         python-version: '3.x'
     - name: Checkout
-      uses: actions/checkout@v2
+      uses: actions/checkout@v3.1.0
     - name: Regenerate certs
       # Use a conditional step instead of a conditional job to work around #20700.
       if: github.repository == 'web-platform-tests/wpt'