diff --git a/.github/workflows/add-tag-to-existing-image.yml b/.github/workflows/add-tag-to-existing-image.yml
index 9a251a86bb..9534cdf346 100644
--- a/.github/workflows/add-tag-to-existing-image.yml
+++ b/.github/workflows/add-tag-to-existing-image.yml
@@ -29,7 +29,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check out repository code
-        uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
       - name: Run add-tag-to-existing-image.sh
         if: github.event.inputs.images != '' && github.event.inputs.tags != ''
         run: ./scripts/add-tag-to-existing-image.sh
diff --git a/.github/workflows/retrieve-image-tags.yml b/.github/workflows/retrieve-image-tags.yml
index ba3a0b687a..2b2ad7b9cf 100644
--- a/.github/workflows/retrieve-image-tags.yml
+++ b/.github/workflows/retrieve-image-tags.yml
@@ -13,7 +13,7 @@ jobs:
   retrieve-image-tags:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
+    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
     - uses: actions/setup-python@f677139bbe7f9c59b41e40162b753c062f5d49a3 # v5.2.0
       with:
         python-version: '3.10'
diff --git a/.github/workflows/validate-retrieve-image-tags-config.yml b/.github/workflows/validate-retrieve-image-tags-config.yml
index 895462fd8e..17cb7a64e1 100644
--- a/.github/workflows/validate-retrieve-image-tags-config.yml
+++ b/.github/workflows/validate-retrieve-image-tags-config.yml
@@ -11,7 +11,7 @@ jobs:
   validate-retrieve-image-tags:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
+    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
     - name: Validate JSON
       run: jq type retrieve-image-tags/config.json
     - uses: actions/setup-python@f677139bbe7f9c59b41e40162b753c062f5d49a3 # v5.2.0