diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 2a9e7719..6ddf7889 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -90,14 +90,14 @@ jobs:
       contents: read
       security-events: write
     steps:
-    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
+    - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10
       with:
         ref: ${{ inputs.ref || github.ref }}
         submodules: recursive
         filter: tree:0
     - name: Checkout maven2 branch
       if: env.COMMIT_MAVEN_ARTIFACTS == 'true'
-      uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
+      uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10
       with:
         path: maven2
         ref: main
@@ -314,7 +314,7 @@ jobs:
       actions: read
       contents: write
     steps:
-    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
+    - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10
       with:
         ref: ${{ inputs.ref || github.ref }}
         submodules: recursive
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 3f4389d0..603a055d 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -20,7 +20,7 @@ jobs:
       actions: read
       contents: read
     steps:
-    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
+    - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10
       with:
         submodules: recursive
     # -------------------------
@@ -63,7 +63,7 @@ jobs:
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN  }}
       run: echo "GH_TOKEN=${GITHUB_TOKEN}" >> $GITHUB_ENV
-    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
+    - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10
       with:
         token: ${{ env.GH_TOKEN }}
         submodules: recursive