diff --git a/.github/workflows/lint-whitespace.yml b/.github/workflows/lint-whitespace.yml
index 10ee06f..3281f11 100644
--- a/.github/workflows/lint-whitespace.yml
+++ b/.github/workflows/lint-whitespace.yml
@@ -13,7 +13,7 @@ jobs:
     runs-on: ubuntu-20.04
     steps:
       - name: Checkout
-        uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633
+        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b
 
       - name: Check that every file has no trailing whitespace, and exactly one final newline
         run: ./.github/bin/lint-whitespace
diff --git a/.github/workflows/sync-rest.yml b/.github/workflows/sync-rest.yml
index 8a1e5cf..9a09ab9 100644
--- a/.github/workflows/sync-rest.yml
+++ b/.github/workflows/sync-rest.yml
@@ -202,13 +202,13 @@ jobs:
 
       - name: Checkout main repo
         if: steps.pr-already-exists.outputs.result == 'false'
-        uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633
+        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b
         with:
           path: main
 
       - name: Checkout target repo
         if: steps.pr-already-exists.outputs.result == 'false'
-        uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633
+        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b
         with:
           repository: ${{ matrix.repo }}
           token: ${{ secrets.BOT_PERSONAL_ACCESS_TOKEN }}
diff --git a/.github/workflows/sync-tooling.yml b/.github/workflows/sync-tooling.yml
index aa3afbf..df4cd57 100644
--- a/.github/workflows/sync-tooling.yml
+++ b/.github/workflows/sync-tooling.yml
@@ -192,13 +192,13 @@ jobs:
 
       - name: Checkout main repo
         if: steps.pr-already-exists.outputs.result == 'false'
-        uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633
+        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b
         with:
           path: main
 
       - name: Checkout target repo
         if: steps.pr-already-exists.outputs.result == 'false'
-        uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633
+        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b
         with:
           repository: ${{ matrix.repo }}
           token: ${{ secrets.BOT_PERSONAL_ACCESS_TOKEN }}
diff --git a/.github/workflows/sync-tracks.yml b/.github/workflows/sync-tracks.yml
index 9b68f0f..8ccb13b 100644
--- a/.github/workflows/sync-tracks.yml
+++ b/.github/workflows/sync-tracks.yml
@@ -193,13 +193,13 @@ jobs:
 
       - name: Checkout main repo
         if: steps.pr-already-exists.outputs.result == 'false'
-        uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633
+        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b
         with:
           path: main
 
       - name: Checkout target repo
         if: steps.pr-already-exists.outputs.result == 'false'
-        uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633
+        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b
         with:
           repository: ${{ matrix.repo }}
           token: ${{ secrets.BOT_PERSONAL_ACCESS_TOKEN }}