diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index 91f1f73..f32abeb 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -16,7 +16,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@cbb722410c2e876e24abbe8de2cc27693e501dcb # v2
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v2
       - name: Set up Go
         uses: actions/setup-go@41dfa10bad2bb2ae585af6ee5bb4d7d973ad74ed # v2
         with:
@@ -32,7 +32,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@cbb722410c2e876e24abbe8de2cc27693e501dcb # v2
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v2
       - name: Set up Docker
         uses: docker/setup-buildx-action@c47758b77c9736f4b2ef4073d4d51994fabfe349 # v3.7.1
       - name: Docker
@@ -41,7 +41,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@cbb722410c2e876e24abbe8de2cc27693e501dcb # v2
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v2
       - name: Check
         run: make git-porcelain go-mod-tidy
 
@@ -50,7 +50,7 @@ jobs:
     needs: [build, docker]
     steps:
       - name: Checkout code
-        uses: actions/checkout@cbb722410c2e876e24abbe8de2cc27693e501dcb # v2
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v2
       - name: Set up Go
         uses: actions/setup-go@41dfa10bad2bb2ae585af6ee5bb4d7d973ad74ed # v2
         with:
@@ -60,7 +60,7 @@ jobs:
       - name: Test
         run: make test-e2e
       - name: Upload coverage reports to Codecov
-        uses: codecov/codecov-action@5c47607acb93fed5485fdbf7232e8a31425f672a # v5.0.2
+        uses: codecov/codecov-action@015f24e6818733317a2da2edd6290ab26238649a # v5.0.7
         with:
           token: ${{ secrets.CODECOV_TOKEN }}
           files: coverage.out
diff --git a/.github/workflows/main.yaml b/.github/workflows/main.yaml
index 863a0e3..d01f3cb 100644
--- a/.github/workflows/main.yaml
+++ b/.github/workflows/main.yaml
@@ -20,7 +20,7 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v2
         with:
           fetch-depth: 0  
 
@@ -45,7 +45,7 @@ jobs:
                 .
 
       - name: Log in to GHCR
-        uses: docker/login-action@465a07811f14bebb1938fbed4728c6a1ff8901fc # v2
+        uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v2
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index 5b5c321..b431147 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -32,7 +32,7 @@ jobs:
 
     steps:
       - name: "Checkout code"
-        uses: actions/checkout@cbb722410c2e876e24abbe8de2cc27693e501dcb # v4.2.1
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.1
         with:
           persist-credentials: false