diff --git a/.github/workflows/scheduled-snapshots.yml b/.github/workflows/scheduled-snapshots.yml
index 241b592..7bc7f26 100644
--- a/.github/workflows/scheduled-snapshots.yml
+++ b/.github/workflows/scheduled-snapshots.yml
@@ -13,14 +13,15 @@ jobs:
     steps:
 
     - name: Configure AWS credentials
-      uses: aws-actions/configure-aws-credentials@v1
+      uses: aws-actions/configure-aws-credentials@v4
       with:
         aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
         aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
         aws-region: us-east-1
+        role-duration-seconds: 21600  # 6 hour session length
 
     - name: Clone repository
-      uses: actions/checkout@v2.3.4
+      uses: actions/checkout@v4
 
     - name: Count jobs
       id: count_jobs
@@ -96,7 +97,7 @@ jobs:
         echo "failed=$(jq '.jobSummaryList | length' failed.json)" >>$GITHUB_OUTPUT
 
     - name: Clone osbuild-composer repository
-      uses: actions/checkout@v2.3.4
+      uses: actions/checkout@v4
       with:
         repository: osbuild/osbuild-composer
         path: osbuild-composer
@@ -113,7 +114,7 @@ jobs:
       run: .github/scripts/snapshot_update_pr.sh
 
     - name: Clone osbuild repository
-      uses: actions/checkout@v2.3.4
+      uses: actions/checkout@v4
       with:
         repository: osbuild/osbuild
         path: osbuild
@@ -130,7 +131,7 @@ jobs:
       run: .github/scripts/snapshot_update_pr.sh
 
     - name: Clone cloud image val repository
-      uses: actions/checkout@v2.3.4
+      uses: actions/checkout@v4
       with:
         repository: osbuild/cloud-image-val
         path: cloud-image-val
@@ -147,7 +148,7 @@ jobs:
       run: .github/scripts/snapshot_update_pr.sh
 
     - name: Clone images repository
-      uses: actions/checkout@v2.3.4
+      uses: actions/checkout@v4
       with:
         repository: osbuild/images
         path: images