diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index d2e0cec6da6..bce5c568da3 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6
         with:
           persist-credentials: false
       - name: Use Node.js
diff --git a/.github/workflows/conflicts.yml b/.github/workflows/conflicts.yml
index 00633360e1e..4dfcd422c28 100644
--- a/.github/workflows/conflicts.yml
+++ b/.github/workflows/conflicts.yml
@@ -12,7 +12,7 @@ jobs:
   detect-unresolved-conflicts:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6
         with:
           persist-credentials: false
       - name: List files with merge conflict markers
diff --git a/.github/workflows/docker_build_deploy.yml b/.github/workflows/docker_build_deploy.yml
index bc1ed3c7333..0f6f7ac9772 100644
--- a/.github/workflows/docker_build_deploy.yml
+++ b/.github/workflows/docker_build_deploy.yml
@@ -24,7 +24,7 @@ jobs:
       GAR_REGISTRY: us-docker.pkg.dev
     steps:
       - name: Check out the repo
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6
         with:
           persist-credentials: false
 
diff --git a/.github/workflows/docker_build_deploy_dev.yml b/.github/workflows/docker_build_deploy_dev.yml
index 96d5a87d687..0a5b4c2868f 100644
--- a/.github/workflows/docker_build_deploy_dev.yml
+++ b/.github/workflows/docker_build_deploy_dev.yml
@@ -24,7 +24,7 @@ jobs:
       GAR_REGISTRY: us-docker.pkg.dev
     steps:
       - name: Check out the repo
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6
         with:
           persist-credentials: false
 
diff --git a/.github/workflows/docker_check.yml b/.github/workflows/docker_check.yml
index f7ef21150f9..cdfea62befd 100644
--- a/.github/workflows/docker_check.yml
+++ b/.github/workflows/docker_check.yml
@@ -20,7 +20,7 @@ jobs:
           sudo apt-get install docker-ce
 
       - name: Check out the repo
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6
         with:
           persist-credentials: false
 
diff --git a/.github/workflows/functional_tests_cron.yml b/.github/workflows/functional_tests_cron.yml
index 29fa3142fdd..5cad77f776d 100644
--- a/.github/workflows/functional_tests_cron.yml
+++ b/.github/workflows/functional_tests_cron.yml
@@ -31,7 +31,7 @@ jobs:
           echo "Please select an environment for manual runs"
           exit 1
 
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6
         with:
           persist-credentials: false
       - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v6
diff --git a/.github/workflows/functional_tests_pr.yml b/.github/workflows/functional_tests_pr.yml
index 9d7053ed26c..2edcc6340e3 100644
--- a/.github/workflows/functional_tests_pr.yml
+++ b/.github/workflows/functional_tests_pr.yml
@@ -32,7 +32,7 @@ jobs:
         - 5432:5432
 
     steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6
         with:
           persist-credentials: false
       - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v6
diff --git a/.github/workflows/lint.yaml b/.github/workflows/lint.yaml
index 27615881774..146468ca36f 100644
--- a/.github/workflows/lint.yaml
+++ b/.github/workflows/lint.yaml
@@ -12,7 +12,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6
         with:
           persist-credentials: false
       - name: Use Node.js
diff --git a/.github/workflows/production_deploy.yml b/.github/workflows/production_deploy.yml
index 79971ce63fa..cbd4460dae2 100644
--- a/.github/workflows/production_deploy.yml
+++ b/.github/workflows/production_deploy.yml
@@ -36,7 +36,7 @@ jobs:
       SAFE_ENVIRONMENT: ${{ inputs.environment }}
     steps:
       - name: Checkout Repository
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6
         with:
           persist-credentials: false
       
diff --git a/.github/workflows/reference_linter.yaml b/.github/workflows/reference_linter.yaml
index 3f372afbd5b..65ae96f72d2 100644
--- a/.github/workflows/reference_linter.yaml
+++ b/.github/workflows/reference_linter.yaml
@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Clone repository
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6
         with:
           persist-credentials: false
       - name: Set up Python 3
diff --git a/.github/workflows/release_retag.yaml b/.github/workflows/release_retag.yaml
index 76325998d25..f9748df3c15 100644
--- a/.github/workflows/release_retag.yaml
+++ b/.github/workflows/release_retag.yaml
@@ -20,7 +20,7 @@ jobs:
       GAR_IMAGE_BASE: ${{ vars.GAR_REPO }}/${{ github.event.repository.name }}
     steps:
     - name: Check out the repo
-      uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+      uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6
       with:
         persist-credentials: false # Not strictly needed for retagging, but good practice
 
diff --git a/.github/workflows/test_integrations.yml b/.github/workflows/test_integrations.yml
index 611ee31b9c2..ce502f16367 100644
--- a/.github/workflows/test_integrations.yml
+++ b/.github/workflows/test_integrations.yml
@@ -11,7 +11,7 @@ jobs:
   test-integrations:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6
         with:
           persist-credentials: false
 
diff --git a/.github/workflows/unittests.yaml b/.github/workflows/unittests.yaml
index ecb6b89b7b8..8a2eb7d2803 100644
--- a/.github/workflows/unittests.yaml
+++ b/.github/workflows/unittests.yaml
@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6
         with:
           persist-credentials: false
       - name: Use Node.js