diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 52168e6..5f1c9ca 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -34,7 +34,7 @@ jobs:
   test:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - name: Set up JDK 21
         uses: actions/setup-java@cf277c60eb25467037889841efdb72551f06f6c3 # v4
         with:
@@ -46,7 +46,7 @@ jobs:
         with:
           cli: 1.12.4.1618
       - name: Check out AgentSpaces core
-        uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           repository: badmonkeyai/AgentSpaces
           ref: ${{ env.AGENTSPACES_REF }}
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 85a64b8..7158f57 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -30,7 +30,7 @@ jobs:
   deploy:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - name: Set up JDK 21
         uses: actions/setup-java@cf277c60eb25467037889841efdb72551f06f6c3 # v4
         with:
@@ -51,7 +51,7 @@ jobs:
           test -n "$core" || { echo "no agentspaces-common version in deps.edn"; exit 1; }
           echo "AGENTSPACES_REF=v$core" >> "$GITHUB_ENV"
       - name: Check out AgentSpaces core
-        uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           repository: badmonkeyai/AgentSpaces
           ref: ${{ env.AGENTSPACES_REF }}