diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 4daf516..da89ada 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -46,7 +46,7 @@ jobs:
           egress-policy: audit
 
       - name: Checkout repository
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml
index 58f1b5b..8922a6d 100644
--- a/.github/workflows/dependency-review.yml
+++ b/.github/workflows/dependency-review.yml
@@ -22,7 +22,7 @@ jobs:
           egress-policy: audit
 
       - name: 'Checkout Repository'
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - name: 'Dependency Review'
         uses: actions/dependency-review-action@2031cfc080254a8a887f58cffee85186f0e49e48 # v4.9.0
         with:
diff --git a/.github/workflows/scorecards.yml b/.github/workflows/scorecards.yml
index b7bcd39..d62d352 100644
--- a/.github/workflows/scorecards.yml
+++ b/.github/workflows/scorecards.yml
@@ -41,7 +41,7 @@ jobs:
           egress-policy: audit
 
       - name: "Checkout code"
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
 
diff --git a/.github/workflows/validate-community-plugins.yml b/.github/workflows/validate-community-plugins.yml
index 0c0c46f..94e280b 100644
--- a/.github/workflows/validate-community-plugins.yml
+++ b/.github/workflows/validate-community-plugins.yml
@@ -23,7 +23,7 @@ jobs:
       matrix: ${{ steps.parse.outputs.matrix }}
       plugin_count: ${{ steps.parse.outputs.count }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - name: Parse plugin registry
         id: parse
@@ -73,7 +73,7 @@ jobs:
       fail-fast: false
       matrix: ${{ fromJson(needs.load-plugins.outputs.matrix) }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - name: Create test project
         run: |
@@ -142,7 +142,7 @@ jobs:
     if: always()
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - name: Generate summary
         uses: actions/github-script@v7
diff --git a/.github/workflows/validate-orchestrator.yml b/.github/workflows/validate-orchestrator.yml
index d5d2a25..cf93e20 100644
--- a/.github/workflows/validate-orchestrator.yml
+++ b/.github/workflows/validate-orchestrator.yml
@@ -57,10 +57,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout unity-builder
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Checkout orchestrator
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           repository: game-ci/orchestrator
           ref: ${{ github.head_ref || github.ref_name }}
@@ -70,7 +70,7 @@ jobs:
 
       - name: Fallback to orchestrator main branch
         if: steps.orchestrator-branch.outcome == 'failure'
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           repository: game-ci/orchestrator
           path: orchestrator-standalone