diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 0e566663..be76c795 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -14,7 +14,7 @@ jobs:
     strategy:
       fail-fast: false
     steps:
-      - uses: actions/checkout@v4.1.1
+      - uses: actions/checkout@v4.1.3
         with:
           fetch-depth: 100
       - uses: cachix/install-nix-action@v26
diff --git a/.github/workflows/docker-image.yml b/.github/workflows/docker-image.yml
index f43b0972..54e3d3d3 100644
--- a/.github/workflows/docker-image.yml
+++ b/.github/workflows/docker-image.yml
@@ -6,7 +6,7 @@ jobs:
   docker-images:
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@v4.1.1
+      - uses: actions/checkout@v4.1.3
         with:
           fetch-depth: 0
       - name: Set current version
diff --git a/.github/workflows/release-nightly.yml b/.github/workflows/release-nightly.yml
index a498086d..4f310953 100644
--- a/.github/workflows/release-nightly.yml
+++ b/.github/workflows/release-nightly.yml
@@ -9,7 +9,7 @@ jobs:
     strategy:
       fail-fast: true
     steps:
-      - uses: actions/checkout@v4.1.1
+      - uses: actions/checkout@v4.1.3
         with:
           fetch-depth: 0
       - uses: cachix/install-nix-action@v26
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index e95f1898..88e7d1e1 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -9,7 +9,7 @@ jobs:
     strategy:
       fail-fast: true
     steps:
-      - uses: actions/checkout@v4.1.1
+      - uses: actions/checkout@v4.1.3
         with:
           fetch-depth: 0
       - uses: cachix/install-nix-action@v26
diff --git a/.github/workflows/website.yml b/.github/workflows/website.yml
index bd994b7e..b33f70f7 100644
--- a/.github/workflows/website.yml
+++ b/.github/workflows/website.yml
@@ -7,7 +7,7 @@ jobs:
   publish-website:
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@v4.1.1
+      - uses: actions/checkout@v4.1.3
         with:
           fetch-depth: 0
       - name: Set current version