diff --git a/.github/workflows/analyze.yml b/.github/workflows/analyze.yml
index 00763b1..47f9e6d 100644
--- a/.github/workflows/analyze.yml
+++ b/.github/workflows/analyze.yml
@@ -17,7 +17,7 @@ jobs:
         python-version: ['3.11']
 
     steps:
-    - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608
+    - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
     - name: Set up Python ${{ matrix.python-version }}
       uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236
       with:
diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index 669530b..9b9b00a 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -28,7 +28,7 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608
+      uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
 
     - name: Initialize CodeQL
       uses: github/codeql-action/init@0116bc2df50751f9724a2e35ef1f24d22f90e4e1
diff --git a/.github/workflows/semgrep.yml b/.github/workflows/semgrep.yml
index b51b7da..56ba0d8 100644
--- a/.github/workflows/semgrep.yml
+++ b/.github/workflows/semgrep.yml
@@ -21,6 +21,6 @@ jobs:
       image: returntocorp/semgrep
     if: (github.actor != 'dependabot[bot]')
     steps:
-      - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
         # It takes some time to scan "vermin/rules.py". More than the default 30s timeout.
       - run: semgrep ci --timeout 60 --verbose
diff --git a/.github/workflows/snyk-schedule.yml b/.github/workflows/snyk-schedule.yml
index 735cc2f..4d17599 100644
--- a/.github/workflows/snyk-schedule.yml
+++ b/.github/workflows/snyk-schedule.yml
@@ -16,7 +16,7 @@ jobs:
         requirements: [analysis, coverage]
 
     steps:
-      - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
 
       - name: Set up Python
         uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236
diff --git a/.github/workflows/snyk.yml b/.github/workflows/snyk.yml
index 2db18fd..c379f92 100644
--- a/.github/workflows/snyk.yml
+++ b/.github/workflows/snyk.yml
@@ -16,7 +16,7 @@ jobs:
         requirements: [analysis, coverage]
 
     steps:
-      - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
 
       - name: Set up Python
         uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 63873d5..c7da416 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -66,7 +66,7 @@ jobs:
             python-version: 3.6
 
     steps:
-    - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608
+    - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
     - name: Set up Python ${{ matrix.python-version }}
       uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236
       with: