diff --git a/.github/workflows/cd.yml b/.github/workflows/cd.yml
index d376ed65..dd644a6c 100644
--- a/.github/workflows/cd.yml
+++ b/.github/workflows/cd.yml
@@ -133,7 +133,7 @@ jobs:
             fulcio.sigstore.dev:443
             api.sigstore.dev:443
       - name: "📂 Checkout Repository Code"
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           persist-credentials: false
           fetch-depth: 0
@@ -248,7 +248,7 @@ jobs:
 
       - name: "🏗️ Checkout Release PR Branch"
         if: ${{ steps.release.outputs.pr }}
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           ref: ${{ fromJson(steps.release.outputs.pr).headBranchName }}
           persist-credentials: false
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index bcd34573..6d5404c6 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -119,7 +119,7 @@ jobs:
             fulcio.sigstore.dev:443
             api.sigstore.dev:443
       - name: "📂 Checkout Repository Code"
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           persist-credentials: false
 
@@ -232,7 +232,7 @@ jobs:
             fulcio.sigstore.dev:443
             api.sigstore.dev:443
       - name: "📂 Checkout Repository Code"
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           persist-credentials: false
 
@@ -360,7 +360,7 @@ jobs:
             fulcio.sigstore.dev:443
             api.sigstore.dev:443
       - name: "📂 Checkout Repository Code"
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           persist-credentials: false
 
@@ -529,7 +529,7 @@ jobs:
             fulcio.sigstore.dev:443
             api.sigstore.dev:443
       - name: "📂 Checkout Repository Code"
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           persist-credentials: false
           fetch-depth: 0
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 105a067f..4e568166 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -149,7 +149,7 @@ jobs:
             fulcio.sigstore.dev:443
             api.sigstore.dev:443
       - name: "📂 Checkout Repository Code"
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           persist-credentials: false
 
diff --git a/.github/workflows/dependabot-auto-merge.yml b/.github/workflows/dependabot-auto-merge.yml
index 8814c73e..0a28ba5e 100644
--- a/.github/workflows/dependabot-auto-merge.yml
+++ b/.github/workflows/dependabot-auto-merge.yml
@@ -106,7 +106,7 @@ jobs:
             fulcio.sigstore.dev:443
             api.sigstore.dev:443
       - name: "📂 Checkout Repository Code"
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           persist-credentials: false
 
diff --git a/.github/workflows/dependabot-sync.yml b/.github/workflows/dependabot-sync.yml
index ef5da612..0747e592 100644
--- a/.github/workflows/dependabot-sync.yml
+++ b/.github/workflows/dependabot-sync.yml
@@ -146,7 +146,7 @@ jobs:
             fulcio.sigstore.dev:443
             api.sigstore.dev:443
       - name: "📂 Checkout Repository Code"
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           persist-credentials: true
           ref: ${{ github.ref }}
diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml
index b7df1076..b2ec3a21 100644
--- a/.github/workflows/docker.yml
+++ b/.github/workflows/docker.yml
@@ -188,7 +188,7 @@ jobs:
 
       - name: "📂 Checkout Repository Code"
         if: steps.version-filter.outputs.skip != 'true'
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           token: ${{ secrets.WORKFLOW_SECRET || secrets.GITHUB_TOKEN }}
           persist-credentials: false
diff --git a/.github/workflows/nightly-audit.yml b/.github/workflows/nightly-audit.yml
index 453c1b55..5b769cd9 100644
--- a/.github/workflows/nightly-audit.yml
+++ b/.github/workflows/nightly-audit.yml
@@ -109,7 +109,7 @@ jobs:
             fulcio.sigstore.dev:443
             api.sigstore.dev:443
       - name: "📂 Checkout Repository Code"
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           fetch-depth: 0
           persist-credentials: false
diff --git a/.github/workflows/pages.yml b/.github/workflows/pages.yml
index 3b561aeb..4d3101b8 100644
--- a/.github/workflows/pages.yml
+++ b/.github/workflows/pages.yml
@@ -138,7 +138,7 @@ jobs:
             fulcio.sigstore.dev:443
             api.sigstore.dev:443
       - name: "📂 Checkout Repository Code"
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         # Fetches source documentation and site assets for the build process.
         with:
           persist-credentials: false
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index c5d9715b..12bce092 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -121,7 +121,7 @@ jobs:
             fulcio.sigstore.dev:443
             api.sigstore.dev:443
       - name: "📂 Checkout Repository Code"
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           fetch-depth: 0
           persist-credentials: false