diff --git a/.github/workflows/chart-manual.yml b/.github/workflows/chart-manual.yml
index 3657c4e1..b299d1d6 100644
--- a/.github/workflows/chart-manual.yml
+++ b/.github/workflows/chart-manual.yml
@@ -33,7 +33,7 @@ jobs:
           git config --global --add safe.directory /__w/portefaix-hub/portefaix-hub
 
       - name: Checkout
-        uses: actions/checkout@v3.5.0
+        uses: actions/checkout@v3.5.2
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/chart-publish.yml b/.github/workflows/chart-publish.yml
index 0b4a42a4..24d5848a 100644
--- a/.github/workflows/chart-publish.yml
+++ b/.github/workflows/chart-publish.yml
@@ -31,7 +31,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v3.5.0
+        uses: actions/checkout@v3.5.2
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/chart-release.yml b/.github/workflows/chart-release.yml
index 3e4e3314..dde60a1e 100644
--- a/.github/workflows/chart-release.yml
+++ b/.github/workflows/chart-release.yml
@@ -39,7 +39,7 @@ jobs:
           git config --global --add safe.directory /__w/portefaix-hub/portefaix-hub
 
       - name: Checkout
-        uses: actions/checkout@v3.5.0
+        uses: actions/checkout@v3.5.2
         with:
           fetch-depth: 0
 
@@ -159,7 +159,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v3.5.0
+        uses: actions/checkout@v3.5.2
         with:
           ref: "gh-pages"
           fetch-depth: 0
@@ -184,7 +184,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v3.5.0
+        uses: actions/checkout@v3.5.2
         with:
           ref: "gh-pages"
           fetch-depth: 0
diff --git a/.github/workflows/chart-test.yml b/.github/workflows/chart-test.yml
index ba9e4e33..be83a77e 100644
--- a/.github/workflows/chart-test.yml
+++ b/.github/workflows/chart-test.yml
@@ -40,7 +40,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v3.5.0
+        uses: actions/checkout@v3.5.2
 
       - name: Fetch history
         run: git fetch --prune --unshallow
@@ -111,7 +111,7 @@ jobs:
           - v1.25.0
     steps:
       - name: Checkout
-        uses: actions/checkout@v3.5.0
+        uses: actions/checkout@v3.5.2
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/chart-validate.yml b/.github/workflows/chart-validate.yml
index ca01a465..64caa451 100644
--- a/.github/workflows/chart-validate.yml
+++ b/.github/workflows/chart-validate.yml
@@ -40,7 +40,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v3.5.0
+        uses: actions/checkout@v3.5.2
 
       - name: Validate
         uses: nlamirault/helm-kubeconform-action@v0.2.0
diff --git a/.github/workflows/chart-website.yml b/.github/workflows/chart-website.yml
index eecb69d2..5b1603c9 100644
--- a/.github/workflows/chart-website.yml
+++ b/.github/workflows/chart-website.yml
@@ -24,7 +24,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v3.5.0
+        uses: actions/checkout@v3.5.2
         with:
           ref: "gh-pages"
           fetch-depth: 0
diff --git a/.github/workflows/charts-mixins.yml b/.github/workflows/charts-mixins.yml
index e187bc0c..d18c859c 100644
--- a/.github/workflows/charts-mixins.yml
+++ b/.github/workflows/charts-mixins.yml
@@ -43,7 +43,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Checkout
-      uses: actions/checkout@v3.5.0
+      uses: actions/checkout@v3.5.2
 
     - uses: actions/setup-python@v4.5.0
       with:
@@ -100,7 +100,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Checkout
-      uses: actions/checkout@v3.5.0
+      uses: actions/checkout@v3.5.2
 
     - uses: actions/setup-python@v4.5.0
       with:
@@ -157,7 +157,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Checkout
-      uses: actions/checkout@v3.5.0
+      uses: actions/checkout@v3.5.2
 
     - uses: actions/setup-python@v4.5.0
       with:
@@ -214,7 +214,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Checkout
-      uses: actions/checkout@v3.5.0
+      uses: actions/checkout@v3.5.2
 
     - uses: actions/setup-python@v4.5.0
       with:
@@ -271,7 +271,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Checkout
-      uses: actions/checkout@v3.5.0
+      uses: actions/checkout@v3.5.2
 
     - uses: actions/setup-python@v4.5.0
       with:
@@ -328,7 +328,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Checkout
-      uses: actions/checkout@v3.5.0
+      uses: actions/checkout@v3.5.2
 
     - uses: actions/setup-python@v4.5.0
       with:
@@ -385,7 +385,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Checkout
-      uses: actions/checkout@v3.5.0
+      uses: actions/checkout@v3.5.2
 
     - uses: actions/setup-python@v4.5.0
       with:
@@ -442,7 +442,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Checkout
-      uses: actions/checkout@v3.5.0
+      uses: actions/checkout@v3.5.2
 
     - uses: actions/setup-python@v4.5.0
       with:
@@ -499,7 +499,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Checkout
-      uses: actions/checkout@v3.5.0
+      uses: actions/checkout@v3.5.2
 
     - uses: actions/setup-python@v4.5.0
       with:
@@ -556,7 +556,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Checkout
-      uses: actions/checkout@v3.5.0
+      uses: actions/checkout@v3.5.2
 
     - uses: actions/setup-python@v4.5.0
       with:
@@ -613,7 +613,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Checkout
-      uses: actions/checkout@v3.5.0
+      uses: actions/checkout@v3.5.2
 
     - uses: actions/setup-python@v4.5.0
       with:
@@ -670,7 +670,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Checkout
-      uses: actions/checkout@v3.5.0
+      uses: actions/checkout@v3.5.2
 
     - uses: actions/setup-python@v4.5.0
       with:
@@ -727,7 +727,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Checkout
-      uses: actions/checkout@v3.5.0
+      uses: actions/checkout@v3.5.2
 
     - uses: actions/setup-python@v4.5.0
       with:
@@ -784,7 +784,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Checkout
-      uses: actions/checkout@v3.5.0
+      uses: actions/checkout@v3.5.2
 
     - uses: actions/setup-python@v4.5.0
       with:
@@ -841,7 +841,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Checkout
-      uses: actions/checkout@v3.5.0
+      uses: actions/checkout@v3.5.2
 
     - uses: actions/setup-python@v4.5.0
       with:
@@ -898,7 +898,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Checkout
-      uses: actions/checkout@v3.5.0
+      uses: actions/checkout@v3.5.2
 
     - uses: actions/setup-python@v4.5.0
       with:
@@ -955,7 +955,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Checkout
-      uses: actions/checkout@v3.5.0
+      uses: actions/checkout@v3.5.2
 
     - uses: actions/setup-python@v4.5.0
       with:
@@ -1012,7 +1012,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Checkout
-      uses: actions/checkout@v3.5.0
+      uses: actions/checkout@v3.5.2
 
     - uses: actions/setup-python@v4.5.0
       with:
diff --git a/.github/workflows/charts-policies.yml b/.github/workflows/charts-policies.yml
index 3b9a0173..d4f33634 100644
--- a/.github/workflows/charts-policies.yml
+++ b/.github/workflows/charts-policies.yml
@@ -40,7 +40,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Checkout
-      uses: actions/checkout@v3.5.0
+      uses: actions/checkout@v3.5.2
 
     - uses: actions/setup-python@v4.5.0
       with:
diff --git a/.github/workflows/issues-label.yml b/.github/workflows/issues-label.yml
index 7eb570c7..df94dc80 100644
--- a/.github/workflows/issues-label.yml
+++ b/.github/workflows/issues-label.yml
@@ -31,7 +31,7 @@ jobs:
   comment:
     runs-on: ubuntu-20.04
     steps:
-      - uses: actions/checkout@v3.5.0
+      - uses: actions/checkout@v3.5.2
 
       - name: Label Commenter
         uses: peaceiris/actions-label-commenter@v1
diff --git a/.github/workflows/rebase.yml b/.github/workflows/rebase.yml
index 817787e0..3ec2952f 100644
--- a/.github/workflows/rebase.yml
+++ b/.github/workflows/rebase.yml
@@ -25,7 +25,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout the latest code
-        uses: actions/checkout@v3.5.0
+        uses: actions/checkout@v3.5.2
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
           fetch-depth: 0 # otherwise, you will fail to push refs to dest repo
diff --git a/.github/workflows/renovate.yml b/.github/workflows/renovate.yml
index 9d05e351..2e9a8874 100644
--- a/.github/workflows/renovate.yml
+++ b/.github/workflows/renovate.yml
@@ -25,7 +25,7 @@ jobs:
   renovate-helmrelease:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v3.5.0
+    - uses: actions/checkout@v3.5.2
       with:
         fetch-depth: 1
 
diff --git a/.github/workflows/size.yaml b/.github/workflows/size.yaml
index 0b76ce0e..9486f95a 100644
--- a/.github/workflows/size.yaml
+++ b/.github/workflows/size.yaml
@@ -24,7 +24,7 @@ jobs:
   update_labels:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3.5.0
+      - uses: actions/checkout@v3.5.2
 
       - uses: actions-ecosystem/action-size@v2
         id: size
diff --git a/.github/workflows/test-sigstore-gpg.yml b/.github/workflows/test-sigstore-gpg.yml
index ab055277..97f9e2e7 100644
--- a/.github/workflows/test-sigstore-gpg.yml
+++ b/.github/workflows/test-sigstore-gpg.yml
@@ -29,7 +29,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v3.5.0
+        uses: actions/checkout@v3.5.2
         with:
           fetch-depth: 0