diff --git a/.github/workflows/lint-whitespace.yml b/.github/workflows/lint-whitespace.yml
index ea5c725..d302b4c 100644
--- a/.github/workflows/lint-whitespace.yml
+++ b/.github/workflows/lint-whitespace.yml
@@ -13,7 +13,7 @@ jobs:
     runs-on: ubuntu-20.04
     steps:
       - name: Checkout
-        uses: actions/checkout@24cb9080177205b6e8c946b17badbe402adc938f
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
 
       - name: Check that every file has no trailing whitespace, and exactly one final newline
         run: ./.github/bin/lint-whitespace
diff --git a/.github/workflows/sync-rest.yml b/.github/workflows/sync-rest.yml
index ffc653c..7bee230 100644
--- a/.github/workflows/sync-rest.yml
+++ b/.github/workflows/sync-rest.yml
@@ -202,13 +202,13 @@ jobs:
 
       - name: Checkout main repo
         if: steps.pr-already-exists.outputs.result == 'false'
-        uses: actions/checkout@24cb9080177205b6e8c946b17badbe402adc938f
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
         with:
           path: main
 
       - name: Checkout target repo
         if: steps.pr-already-exists.outputs.result == 'false'
-        uses: actions/checkout@24cb9080177205b6e8c946b17badbe402adc938f
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
         with:
           repository: ${{ matrix.repo }}
           token: ${{ secrets.BOT_PERSONAL_ACCESS_TOKEN }}
diff --git a/.github/workflows/sync-tooling.yml b/.github/workflows/sync-tooling.yml
index 428ce0b..4cec2ac 100644
--- a/.github/workflows/sync-tooling.yml
+++ b/.github/workflows/sync-tooling.yml
@@ -192,13 +192,13 @@ jobs:
 
       - name: Checkout main repo
         if: steps.pr-already-exists.outputs.result == 'false'
-        uses: actions/checkout@24cb9080177205b6e8c946b17badbe402adc938f
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
         with:
           path: main
 
       - name: Checkout target repo
         if: steps.pr-already-exists.outputs.result == 'false'
-        uses: actions/checkout@24cb9080177205b6e8c946b17badbe402adc938f
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
         with:
           repository: ${{ matrix.repo }}
           token: ${{ secrets.BOT_PERSONAL_ACCESS_TOKEN }}
diff --git a/.github/workflows/sync-tracks.yml b/.github/workflows/sync-tracks.yml
index 0349835..437cce4 100644
--- a/.github/workflows/sync-tracks.yml
+++ b/.github/workflows/sync-tracks.yml
@@ -193,13 +193,13 @@ jobs:
 
       - name: Checkout main repo
         if: steps.pr-already-exists.outputs.result == 'false'
-        uses: actions/checkout@24cb9080177205b6e8c946b17badbe402adc938f
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
         with:
           path: main
 
       - name: Checkout target repo
         if: steps.pr-already-exists.outputs.result == 'false'
-        uses: actions/checkout@24cb9080177205b6e8c946b17badbe402adc938f
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
         with:
           repository: ${{ matrix.repo }}
           token: ${{ secrets.BOT_PERSONAL_ACCESS_TOKEN }}