diff --git a/.github/workflows/action-image-build.yaml b/.github/workflows/action-image-build.yaml
index 806327cbcf..82e23aae36 100644
--- a/.github/workflows/action-image-build.yaml
+++ b/.github/workflows/action-image-build.yaml
@@ -47,12 +47,12 @@ jobs:
         image: ["${{ fromJson(inputs.imagesToBuild) }}"]
       fail-fast: false
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 1
 
       - name: Checkout private repo
-        uses: actions/checkout@v3
+        uses: actions/checkout@v7
         with:
           repository: elfhosted/containers-private
           path: containers-private
diff --git a/.github/workflows/image-rebuild.yaml b/.github/workflows/image-rebuild.yaml
index 8e5b851a2c..21de4efacf 100644
--- a/.github/workflows/image-rebuild.yaml
+++ b/.github/workflows/image-rebuild.yaml
@@ -18,7 +18,7 @@ jobs:
       addedOrModifiedImages: ${{ steps.collect-changes.outputs.addedOrModifiedImages }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v7
 
       - name: Collect changes
         id: collect-changes
@@ -39,7 +39,7 @@ jobs:
           sudo apt-get -y install moreutils jo
 
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v7
         with:
           fetch-depth: 1
 
diff --git a/.github/workflows/release-schedule.yaml b/.github/workflows/release-schedule.yaml
index c875dab821..510dff2f15 100644
--- a/.github/workflows/release-schedule.yaml
+++ b/.github/workflows/release-schedule.yaml
@@ -20,7 +20,7 @@ jobs:
     outputs:
       matrix: ${{ steps.fetch.outputs.changes }}
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v7
         with:
           token: ${{ env.TOKEN }}
 
diff --git a/.github/workflows/renovate-schedule.yaml b/.github/workflows/renovate-schedule.yaml
index f8603a8cf2..f6023e988b 100644
--- a/.github/workflows/renovate-schedule.yaml
+++ b/.github/workflows/renovate-schedule.yaml
@@ -34,7 +34,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v7
 
       - name: Override default config from dispatch variables
         run: |
diff --git a/.github/workflows/security-ghcr-scan.yaml b/.github/workflows/security-ghcr-scan.yaml
index 4bb697b209..ccf500b58b 100644
--- a/.github/workflows/security-ghcr-scan.yaml
+++ b/.github/workflows/security-ghcr-scan.yaml
@@ -22,7 +22,7 @@ jobs:
       matrix: ${{ steps.collect.outputs.matrix }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v7
         with:
           token: ${{ env.TOKEN }}
 
diff --git a/apps/concourse-github-pr-resource/.github/workflows/test.yml b/apps/concourse-github-pr-resource/.github/workflows/test.yml
index 9e56bb94b9..88a30dc948 100644
--- a/apps/concourse-github-pr-resource/.github/workflows/test.yml
+++ b/apps/concourse-github-pr-resource/.github/workflows/test.yml
@@ -13,7 +13,7 @@ jobs:
       with:
         go-version: ${{ matrix.go-version }}
     - name: Checkout code
-      uses: actions/checkout@v2
+      uses: actions/checkout@v7
     - name: Install Task
       run: curl -sL https://taskfile.dev/install.sh | sh
     - name: Run CI Task