diff --git a/.github/workflows/bake.yml b/.github/workflows/bake.yml
index 535f6850..b48aefe0 100644
--- a/.github/workflows/bake.yml
+++ b/.github/workflows/bake.yml
@@ -26,7 +26,7 @@ jobs:
       versions: ${{ steps.get_versions.outputs.versions }}
     steps:
       - name: Checkout Code
-        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5
+        uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
 
       - name: Get supported PostgreSQL versions
         id: get_versions
diff --git a/.github/workflows/bake_targets.yml b/.github/workflows/bake_targets.yml
index 80a8c9ca..f5c2e03b 100644
--- a/.github/workflows/bake_targets.yml
+++ b/.github/workflows/bake_targets.yml
@@ -50,12 +50,12 @@ jobs:
       images: ${{ steps.images.outputs.images }}
     steps:
       - name: Checkout Code
-        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5
+        uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
 
       # bake-action/subaction/matrix doesn't support remote bake files.
       # As a workaround, we clone the repository to allow passing the path to a local file.
       - name: Checkout additional remote source
-        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5
+        uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
         if: ${{ inputs.bake_remote_source != '' }}
         with:
           repository: ${{ inputs.bake_remote_source }}
@@ -141,7 +141,7 @@ jobs:
         image: ${{fromJson(needs.testbuild.outputs.images)}}
     steps:
       - name: Checkout Code
-        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5
+        uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
 
       - name: Security checks
         uses: cloudnative-pg/postgres-containers/.github/actions/security-scans@main
diff --git a/.github/workflows/bake_update.yml b/.github/workflows/bake_update.yml
index fb3711c7..51316af3 100644
--- a/.github/workflows/bake_update.yml
+++ b/.github/workflows/bake_update.yml
@@ -16,7 +16,7 @@ jobs:
     name: Run update script
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5
+      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
         with:
           token: ${{ secrets.REPO_GHA_PAT }}
 
diff --git a/.github/workflows/catalogs.yml b/.github/workflows/catalogs.yml
index 325ed731..307ba85f 100644
--- a/.github/workflows/catalogs.yml
+++ b/.github/workflows/catalogs.yml
@@ -17,13 +17,13 @@ jobs:
     steps:
       # TODO: remove this step once system images are EOL
       - name: Checkout code
-        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5
+        uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
         with:
           path: postgres-containers
           token: ${{ secrets.REPO_GHA_PAT }}
 
       - name: Checkout artifacts
-        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5
+        uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
         with:
           path: artifacts
           repository: cloudnative-pg/artifacts