diff --git a/.github/workflows/build-test-lint.yaml b/.github/workflows/build-test-lint.yaml
index d35118d4ff..373d9f5a1a 100644
--- a/.github/workflows/build-test-lint.yaml
+++ b/.github/workflows/build-test-lint.yaml
@@ -18,7 +18,7 @@ jobs:
           echo "Input ref is empty. Please provide a valid ref."
           exit 1
       - name: "Checkout"
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
         with:
           ref: ${{ inputs.ref }}
       - uses: ./.github/actions/gradle-task
@@ -35,7 +35,7 @@ jobs:
           echo "Input ref is empty. Please provide a valid ref."
           exit 1
       - name: "Checkout"
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
         with:
           ref: ${{ inputs.ref }}
       - name: Build
@@ -52,7 +52,7 @@ jobs:
       checks: write
     steps:
       - name: "Checkout"
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
         with:
           ref: ${{ inputs.ref }}
       - name: Test
@@ -78,7 +78,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: "Checkout"
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
       - name: Build
         uses: ./.github/actions/gradle-task
         with:
diff --git a/.github/workflows/espresso.yaml b/.github/workflows/espresso.yaml
index 959c390ebd..60410d74d3 100644
--- a/.github/workflows/espresso.yaml
+++ b/.github/workflows/espresso.yaml
@@ -55,7 +55,7 @@ jobs:
           sudo df -h
 
       # Github charges us for LFS bandwidth, so let's use the cache
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
         with:
           lfs: false
           ref: ${{ inputs.ref }}
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index d21123fcf9..338a6bca57 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -20,7 +20,7 @@ jobs:
     permissions:
       contents: write
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
       # We need to find out if there's been a previous beta release for this tag, as it'll affect which google play track we promote from
       - uses: octokit/request-action@v2.x
         name: Find beta tags if this is a prod release
diff --git a/.github/workflows/trunk-build.yaml b/.github/workflows/trunk-build.yaml
index ee734f6285..5fca0ad609 100644
--- a/.github/workflows/trunk-build.yaml
+++ b/.github/workflows/trunk-build.yaml
@@ -31,7 +31,7 @@ jobs:
       contents: read
     steps:
       - name: "Checkout"
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
       - name: Build
         uses: ./.github/actions/gradle-task
         with:
@@ -44,7 +44,7 @@ jobs:
       contents: read
     needs: build
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
       - name: Setup Ruby and Fastlane
         uses: ruby/setup-ruby@v1
         with: