diff --git a/.github/workflows/check.yml b/.github/workflows/check.yml
index 69ce796..8aa70ac 100644
--- a/.github/workflows/check.yml
+++ b/.github/workflows/check.yml
@@ -17,11 +17,11 @@ jobs:
     timeout-minutes: 10
     steps:
       - name: Checkout without persistent credentials
-        uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
       - name: Checkout ModAVD for its privacy scanner
-        uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           repository: ModAVD/ModAVD
           path: .modavd
@@ -65,7 +65,7 @@ jobs:
     timeout-minutes: 10
     steps:
       - name: Checkout without persistent credentials
-        uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
       - name: Install zizmor 1.32.0 (version and wheel hash pinned)