diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 4c52f4d..e386e4d 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -20,7 +20,7 @@ jobs:
           - php: "8.5"
             version: "8.5.12"
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
       - uses: shivammathur/setup-php@44454db4f0199b8b9685a5d763dc37cbf79108e1
         env:
           update: true
@@ -76,7 +76,7 @@ jobs:
   docker:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
       - run: docker build --build-arg BUILD_COMMIT="${{ github.sha }}" -t shabbat-ci .
       - run: docker run --rm shabbat-ci php bin/runtime-permissions.php --require-non-root
       - run: docker run --rm shabbat-ci php bin/self-check.php --release
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 23be28c..4ab5c98 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -8,7 +8,7 @@ jobs:
     runs-on: ubuntu-latest
     environment: release-review
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
       - uses: shivammathur/setup-php@44454db4f0199b8b9685a5d763dc37cbf79108e1
         env:
           update: true