diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 068a739769..ab1274ef69 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -20,7 +20,7 @@ jobs:
         sudo -E apt update && sudo -E apt install -y make
 
     - name: Checkout
-      uses: actions/checkout@v4
+      uses: actions/checkout@v5
 
     - name: build
       run: |
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 6a72801d24..d1152b71e0 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -39,7 +39,7 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v4
+      uses: actions/checkout@v5
 
     - if: ${{ matrix.language == 'go' }}
       uses: actions/setup-go@v5.5.0
diff --git a/.github/workflows/go.yml b/.github/workflows/go.yml
index 7278dac5b9..8b4b1d6463 100644
--- a/.github/workflows/go.yml
+++ b/.github/workflows/go.yml
@@ -36,12 +36,12 @@ jobs:
             -H "Authorization: token ${{ secrets.GITHUB_TOKEN }}" \
             "${{ github.event.pull_request.statuses_url }}"
       if: github.event_name == 'pull_request'
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v5
       if: github.event_name == 'push' && steps.setup.outputs.has_token == 'true'
       with:
         fetch-depth: 0
         token: '${{ secrets.GO_TOKEN }}'
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v5
       if: github.event_name == 'pull_request' || steps.setup.outputs.has_token != 'true'
       with:
         fetch-depth: 0
diff --git a/.github/workflows/issue_reviver.yml b/.github/workflows/issue_reviver.yml
index a40a1466a1..ea883494f4 100644
--- a/.github/workflows/issue_reviver.yml
+++ b/.github/workflows/issue_reviver.yml
@@ -9,7 +9,7 @@ jobs:
   issue_reviver:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v5
       if: github.repository == 'google/gvisor'
     - run: make run TARGETS="//tools/github" ARGS="-path=. revive"
       if: github.repository == 'google/gvisor'