diff --git a/.github/workflows/depsreview.yaml b/.github/workflows/depsreview.yaml
index c8ce8b39c9..64644f6785 100644
--- a/.github/workflows/depsreview.yaml
+++ b/.github/workflows/depsreview.yaml
@@ -14,6 +14,6 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - name: 'Checkout Repository'
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8
       - name: 'Review Dependencies'
         uses: actions/dependency-review-action@da24556b548a50705dd671f47852072ea4c105d9
diff --git a/.github/workflows/e2e.yml b/.github/workflows/e2e.yml
index d62039b757..3e3f57f61f 100644
--- a/.github/workflows/e2e.yml
+++ b/.github/workflows/e2e.yml
@@ -17,7 +17,7 @@ jobs:
     runs-on: ubuntu-24.04
     timeout-minutes: 70
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8
         with:
           path: ${{ env.GOPATH }}/src/k8s.io/kops
           fetch-depth: 3
@@ -51,7 +51,7 @@ jobs:
     runs-on: ubuntu-24.04
     timeout-minutes: 70
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8
         with:
           path: ${{ env.GOPATH }}/src/k8s.io/kops
           fetch-depth: 3
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 9b6a55f9fd..045a3ad33a 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -26,7 +26,7 @@ jobs:
     name: build-linux-${{ matrix.os.arch }}
     runs-on: ${{ matrix.os.runs-on }}
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8
         with:
           path: ${{ env.GOPATH }}/src/k8s.io/kops
 
@@ -43,7 +43,7 @@ jobs:
   build-macos-amd64:
     runs-on: macos-latest
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8
         with:
           path: ${{ env.GOPATH }}/src/k8s.io/kops
 
@@ -60,7 +60,7 @@ jobs:
   build-windows-amd64:
     runs-on: windows-2022
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8
         with:
           path: ${{ env.GOPATH }}/src/k8s.io/kops
 
@@ -87,7 +87,7 @@ jobs:
     name: verify-${{ matrix.os.arch }}
     runs-on: ${{ matrix.os.runs-on }}
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8
         with:
           path: ${{ env.GOPATH }}/src/k8s.io/kops
 
diff --git a/.github/workflows/tag-release.yml b/.github/workflows/tag-release.yml
index 846bfe85e5..e97dc6299f 100644
--- a/.github/workflows/tag-release.yml
+++ b/.github/workflows/tag-release.yml
@@ -17,7 +17,7 @@ jobs:
       contents: write
 
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8
       - run: /usr/bin/git config --global user.email actions@github.com
       - run: /usr/bin/git config --global user.name 'GitHub Actions Release Tagger'
       - run: hack/tag-release.sh