diff --git a/.github/workflows/build-test-lint.yaml b/.github/workflows/build-test-lint.yaml
index 5bb9d20b4f..bb4cb0184c 100644
--- a/.github/workflows/build-test-lint.yaml
+++ b/.github/workflows/build-test-lint.yaml
@@ -18,7 +18,7 @@ jobs:
           echo "Input ref is empty. Please provide a valid ref."
           exit 1
       - name: "Checkout"
-        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
         with:
           ref: ${{ inputs.ref }}
       - uses: ./.github/actions/gradle-task
@@ -35,7 +35,7 @@ jobs:
           echo "Input ref is empty. Please provide a valid ref."
           exit 1
       - name: "Checkout"
-        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
         with:
           ref: ${{ inputs.ref }}
       - name: Build
@@ -52,7 +52,7 @@ jobs:
       checks: write
     steps:
       - name: "Checkout"
-        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
         with:
           ref: ${{ inputs.ref }}
       - name: Test
@@ -78,7 +78,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: "Checkout"
-        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
       - name: Build
         uses: ./.github/actions/gradle-task
         with:
diff --git a/.github/workflows/espresso.yaml b/.github/workflows/espresso.yaml
index 5bb609eb8a..8f69f893ff 100644
--- a/.github/workflows/espresso.yaml
+++ b/.github/workflows/espresso.yaml
@@ -55,7 +55,7 @@ jobs:
           sudo df -h
 
       # Github charges us for LFS bandwidth, so let's use the cache
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
         with:
           lfs: false
           ref: ${{ inputs.ref }}
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 3d115266dc..1e4cf4ef58 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -20,7 +20,7 @@ jobs:
     permissions:
       contents: write
     steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
       # We need to find out if there's been a previous beta release for this tag, as it'll affect which google play track we promote from
       - uses: octokit/request-action@v2.x
         name: Find beta tags if this is a prod release
diff --git a/.github/workflows/trunk-build.yaml b/.github/workflows/trunk-build.yaml
index 9c14676856..bf387ccabc 100644
--- a/.github/workflows/trunk-build.yaml
+++ b/.github/workflows/trunk-build.yaml
@@ -31,7 +31,7 @@ jobs:
       contents: read
     steps:
       - name: "Checkout"
-        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
       - name: Build
         uses: ./.github/actions/gradle-task
         with:
@@ -44,7 +44,7 @@ jobs:
       contents: read
     needs: build
     steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
       - name: Setup Ruby and Fastlane
         uses: ruby/setup-ruby@v1
         with: