diff --git a/.github/workflows/pr-build.yaml b/.github/workflows/pr-build.yaml
index 9163fcec..7ef03ff7 100644
--- a/.github/workflows/pr-build.yaml
+++ b/.github/workflows/pr-build.yaml
@@ -18,7 +18,7 @@ jobs:
     timeout-minutes: 60
     name: Sjsonnet jvm build
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # 7.0.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # 7.0.1
       - uses: ./.github/actions/setup-build
         with:
           sbt: 'true'
@@ -35,7 +35,7 @@ jobs:
     timeout-minutes: 60
     name: Sjsonnet Graal Native build
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # 7.0.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # 7.0.1
       - uses: ./.github/actions/setup-build
       - name: Run Native Image Test Suites
         run: sjsonnet/test/graalvm/run_test_suites.py
@@ -50,7 +50,7 @@ jobs:
         lang: ['js', 'wasm', 'native']
     name: Sjsonnet ${{ matrix.lang }} build
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # 7.0.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # 7.0.1
       - uses: ./.github/actions/setup-build
         with:
           node: ${{ matrix.lang == 'js' || matrix.lang == 'wasm' }}
diff --git a/.github/workflows/warm-dep-cache.yaml b/.github/workflows/warm-dep-cache.yaml
index c9bee5a6..41ba08a5 100644
--- a/.github/workflows/warm-dep-cache.yaml
+++ b/.github/workflows/warm-dep-cache.yaml
@@ -35,7 +35,7 @@ jobs:
     timeout-minutes: 60
 
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # 7.0.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # 7.0.1
       - uses: ./.github/actions/setup-build
         with:
           sbt: 'true'