diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index b9a24efef46..1a66a11ca0d 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           persist-credentials: false
       - name: Use Node.js
diff --git a/.github/workflows/conflicts.yml b/.github/workflows/conflicts.yml
index 00633360e1e..8a6f309de25 100644
--- a/.github/workflows/conflicts.yml
+++ b/.github/workflows/conflicts.yml
@@ -12,7 +12,7 @@ jobs:
   detect-unresolved-conflicts:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           persist-credentials: false
       - name: List files with merge conflict markers
diff --git a/.github/workflows/docker_build_deploy.yml b/.github/workflows/docker_build_deploy.yml
index f7a896c18d3..6fafb1b57bf 100644
--- a/.github/workflows/docker_build_deploy.yml
+++ b/.github/workflows/docker_build_deploy.yml
@@ -24,7 +24,7 @@ jobs:
       GAR_REGISTRY: us-docker.pkg.dev
     steps:
       - name: Check out the repo
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           persist-credentials: false
 
diff --git a/.github/workflows/docker_build_deploy_dev.yml b/.github/workflows/docker_build_deploy_dev.yml
index 335030cf35f..4401cea4d8c 100644
--- a/.github/workflows/docker_build_deploy_dev.yml
+++ b/.github/workflows/docker_build_deploy_dev.yml
@@ -24,7 +24,7 @@ jobs:
       GAR_REGISTRY: us-docker.pkg.dev
     steps:
       - name: Check out the repo
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           persist-credentials: false
 
diff --git a/.github/workflows/docker_check.yml b/.github/workflows/docker_check.yml
index f7ef21150f9..e8d6c1138a6 100644
--- a/.github/workflows/docker_check.yml
+++ b/.github/workflows/docker_check.yml
@@ -20,7 +20,7 @@ jobs:
           sudo apt-get install docker-ce
 
       - name: Check out the repo
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           persist-credentials: false
 
diff --git a/.github/workflows/functional_tests_cron.yml b/.github/workflows/functional_tests_cron.yml
index dab43147873..4900d129513 100644
--- a/.github/workflows/functional_tests_cron.yml
+++ b/.github/workflows/functional_tests_cron.yml
@@ -31,7 +31,7 @@ jobs:
           echo "Please select an environment for manual runs"
           exit 1
 
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           persist-credentials: false
       - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6
diff --git a/.github/workflows/functional_tests_pr.yml b/.github/workflows/functional_tests_pr.yml
index 7a00c2ed12d..11c5d7b46d5 100644
--- a/.github/workflows/functional_tests_pr.yml
+++ b/.github/workflows/functional_tests_pr.yml
@@ -32,7 +32,7 @@ jobs:
         - 5432:5432
 
     steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           persist-credentials: false
       - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6
diff --git a/.github/workflows/lint.yaml b/.github/workflows/lint.yaml
index 31a827cf4a4..4db8905ae22 100644
--- a/.github/workflows/lint.yaml
+++ b/.github/workflows/lint.yaml
@@ -12,7 +12,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           persist-credentials: false
       - name: Use Node.js
diff --git a/.github/workflows/production_deploy.yml b/.github/workflows/production_deploy.yml
index 6e8a9bc45b3..dabc51489ec 100644
--- a/.github/workflows/production_deploy.yml
+++ b/.github/workflows/production_deploy.yml
@@ -36,7 +36,7 @@ jobs:
       SAFE_ENVIRONMENT: ${{ inputs.environment }}
     steps:
       - name: Checkout Repository
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           persist-credentials: false
       
diff --git a/.github/workflows/reference_linter.yaml b/.github/workflows/reference_linter.yaml
index c548e528d41..e27e966b2e5 100644
--- a/.github/workflows/reference_linter.yaml
+++ b/.github/workflows/reference_linter.yaml
@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Clone repository
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           persist-credentials: false
       - name: Set up Python 3
diff --git a/.github/workflows/release_retag.yaml b/.github/workflows/release_retag.yaml
index 469b6090c48..e5563eeafd5 100644
--- a/.github/workflows/release_retag.yaml
+++ b/.github/workflows/release_retag.yaml
@@ -20,7 +20,7 @@ jobs:
       GAR_IMAGE_BASE: ${{ vars.GAR_REPO }}/${{ github.event.repository.name }}
     steps:
     - name: Check out the repo
-      uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+      uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
       with:
         persist-credentials: false # Not strictly needed for retagging, but good practice
 
diff --git a/.github/workflows/test_integrations.yml b/.github/workflows/test_integrations.yml
index 5c91776a810..de04bd48c4c 100644
--- a/.github/workflows/test_integrations.yml
+++ b/.github/workflows/test_integrations.yml
@@ -11,7 +11,7 @@ jobs:
   test-integrations:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           persist-credentials: false
 
diff --git a/.github/workflows/unittests.yaml b/.github/workflows/unittests.yaml
index c36104ca54b..2e95ea72add 100644
--- a/.github/workflows/unittests.yaml
+++ b/.github/workflows/unittests.yaml
@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           persist-credentials: false
       - name: Use Node.js