diff --git a/.github/workflows/.ci-build.yml b/.github/workflows/.ci-build.yml
index 20bee78..68e4b38 100644
--- a/.github/workflows/.ci-build.yml
+++ b/.github/workflows/.ci-build.yml
@@ -88,7 +88,7 @@ jobs:
           rm -rf /usr/share/dotnet
           rm -rf "$AGENT_TOOLSDIRECTORY"
 
-      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+      - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v4.1.2
         if: ${{ inputs.enterprise == 'false' }}
 
 
@@ -99,7 +99,7 @@ jobs:
           scope: ${{ inputs.octo_scope }}
           identity: ${{ inputs.octo_identity }}
 
-      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+      - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v4.1.2
         if: ${{ inputs.enterprise == 'true' }}
         with:
           ref: ${{ inputs.checkout_sha }}
diff --git a/.github/workflows/digestabot.yaml b/.github/workflows/digestabot.yaml
index f57cfd7..5451191 100644
--- a/.github/workflows/digestabot.yaml
+++ b/.github/workflows/digestabot.yaml
@@ -16,7 +16,7 @@ jobs:
       id-token: write # To gitsign and federate
 
     steps:
-      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+      - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v4.1.2
 
       - uses: chainguard-dev/octo-sts-action@6177b4481c00308b3839969c3eca88c96a91775f # v1.0.0
         id: octo-sts