diff --git a/.github/workflows/build-images-release.yaml b/.github/workflows/build-images-release.yaml
index 4c7d9f9b..41fe52b1 100644
--- a/.github/workflows/build-images-release.yaml
+++ b/.github/workflows/build-images-release.yaml
@@ -43,7 +43,7 @@ jobs:
           echo ::set-output name=tag::${GITHUB_REF##*/}
 
       - name: Checkout Source Code
-        uses: actions/checkout@1e204e9a9253d643386038d443f96446fa156a97
+        uses: actions/checkout@ec3a7ce113134d7a93b817d10a8272cb61118579
         with:
           persist-credentials: false
 
diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index ab079530..d9cacbcc 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -13,7 +13,7 @@ jobs:
         with:
           go-version: 1.17.1
       - name: Checkout code
-        uses: actions/checkout@1e204e9a9253d643386038d443f96446fa156a97
+        uses: actions/checkout@ec3a7ce113134d7a93b817d10a8272cb61118579
         with:
           path: src/github.com/cilium/certgen
       - name: Formatting check