diff --git a/.github/workflows/deploy-docs.yml b/.github/workflows/deploy-docs.yml
index 73f742ee7..698a79080 100644
--- a/.github/workflows/deploy-docs.yml
+++ b/.github/workflows/deploy-docs.yml
@@ -16,7 +16,7 @@ jobs:
     # if: github.repository_owner == 'spring-cloud'
     steps:
       - name: Checkout
-        uses: actions/checkout@v7
+        uses: actions/checkout@v7.0.1
         with:
           ref: docs-build
           fetch-depth: 1
diff --git a/.github/workflows/maven-publish.yml b/.github/workflows/maven-publish.yml
index e0dae0e2f..a5ffe55df 100644
--- a/.github/workflows/maven-publish.yml
+++ b/.github/workflows/maven-publish.yml
@@ -16,7 +16,7 @@ jobs:
       packages: write
 
     steps:
-    - uses: actions/checkout@v7
+    - uses: actions/checkout@v7.0.1
     - name: Set up JDK 17
       uses: actions/setup-java@v5
       with:
diff --git a/.github/workflows/release-train-build.yml b/.github/workflows/release-train-build.yml
index e29683fda..27ff2bf6c 100644
--- a/.github/workflows/release-train-build.yml
+++ b/.github/workflows/release-train-build.yml
@@ -42,7 +42,7 @@ jobs:
         java-version: "17"
     - name: "Check Out Code"
       id: "check-out-code"
-      uses: "actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0" # v7.0.0
+      uses: "actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1" # v7.0.1
     - name: "Build Release"
       id: "build-release"
       uses: "./.github/actions/release-train-build"
diff --git a/.github/workflows/release-train-test.yml b/.github/workflows/release-train-test.yml
index 7bf4ce08d..266902e72 100644
--- a/.github/workflows/release-train-test.yml
+++ b/.github/workflows/release-train-test.yml
@@ -42,7 +42,7 @@ jobs:
         java-version: "17"
     - name: "Check Out Code"
       id: "check-out-code"
-      uses: "actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0" # v7.0.0
+      uses: "actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1" # v7.0.1
     - name: "Restore Build System Caches"
       id: "restore-build-system-caches"
       uses: "actions/cache/restore@55cc8345863c7cc4c66a329aec7e433d2d1c52a9" # v6.1.0