diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index cad0c45..cc1cb24 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -7,7 +7,7 @@ jobs:
     if: ${{ github.ref == 'refs/heads/main' }}
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
 
       - name: "Publish Features"
         uses: devcontainers/action@v1
diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml
index 2b1fc36..cda13c3 100644
--- a/.github/workflows/test.yaml
+++ b/.github/workflows/test.yaml
@@ -23,7 +23,7 @@ jobs:
         - fedora:latest
         - mcr.microsoft.com/devcontainers/base:ubuntu
     steps:
-    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+    - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
 
     - name: "Install latest devcontainer CLI"
       run: npm install -g @devcontainers/cli
@@ -35,7 +35,7 @@ jobs:
     runs-on: ubuntu-latest
     continue-on-error: true
     steps:
-    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+    - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
 
     - name: "Install latest devcontainer CLI"
       run: npm install -g @devcontainers/cli
diff --git a/.github/workflows/validate.yaml b/.github/workflows/validate.yaml
index 2e53595..168f293 100644
--- a/.github/workflows/validate.yaml
+++ b/.github/workflows/validate.yaml
@@ -12,7 +12,7 @@ jobs:
   renovate-config-validation:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
       - name: Validate renovate config
         uses: rinchsan/renovate-config-validator@v0.2.1
         with: