diff --git a/.github/workflows/depsreview.yaml b/.github/workflows/depsreview.yaml
index 769c106fa5..63615bf6fa 100644
--- a/.github/workflows/depsreview.yaml
+++ b/.github/workflows/depsreview.yaml
@@ -14,6 +14,6 @@ jobs:
     runs-on: ubuntu-20.04
     steps:
       - name: 'Checkout Repository'
-        uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633
+        uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f
       - name: 'Review Dependencies'
         uses: actions/dependency-review-action@5bbc3ba658137598168acb2ab73b21c432dd411b
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 69a241d950..1b8fcf43f6 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -21,7 +21,7 @@ jobs:
         with:
           go-version: '1.22.0'
 
-      - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633
+      - uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f
         with:
           path: ${{ env.GOPATH }}/src/k8s.io/kops
 
@@ -38,7 +38,7 @@ jobs:
       with:
         go-version: '1.22.0'
 
-    - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633
+    - uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f
       with:
         path: ${{ env.GOPATH }}/src/k8s.io/kops
 
@@ -55,7 +55,7 @@ jobs:
       with:
         go-version: '1.22.0'
 
-    - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633
+    - uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f
       with:
         path: ${{ env.GOPATH }}/src/k8s.io/kops
 
@@ -72,7 +72,7 @@ jobs:
         with:
           go-version: '1.22.0'
 
-      - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633
+      - uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f
         with:
           path: ${{ env.GOPATH }}/src/k8s.io/kops
 
diff --git a/.github/workflows/tag-release.yml b/.github/workflows/tag-release.yml
index 66c5a70769..eadac5f558 100644
--- a/.github/workflows/tag-release.yml
+++ b/.github/workflows/tag-release.yml
@@ -17,7 +17,7 @@ jobs:
       contents: write
 
     steps:
-      - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633
+      - uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f
       - run: /usr/bin/git config --global user.email actions@github.com
       - run: /usr/bin/git config --global user.name 'GitHub Actions Release Tagger'
       - run: hack/tag-release.sh
diff --git a/.github/workflows/update-deps.yml b/.github/workflows/update-deps.yml
index 7a0878642e..55f326594e 100644
--- a/.github/workflows/update-deps.yml
+++ b/.github/workflows/update-deps.yml
@@ -20,7 +20,7 @@ jobs:
       - uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491
         with:
           go-version: '1.22.0'
-      - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633
+      - uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f
       - name: Update Dependencies
         id: update_deps
         run: |