diff --git a/.github/workflows/dotnet-code-metrics.yml b/.github/workflows/dotnet-code-metrics.yml
index 2340661da99..db847d31920 100644
--- a/.github/workflows/dotnet-code-metrics.yml
+++ b/.github/workflows/dotnet-code-metrics.yml
@@ -22,7 +22,7 @@ jobs:
         pull-requests: write
 
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v4.1.7
 
     - name: 'Print manual run reason'
       if: ${{ github.event_name == 'workflow_dispatch' }}
diff --git a/.github/workflows/markdownlint.yml b/.github/workflows/markdownlint.yml
index a4177a4bfa6..0a695891b21 100644
--- a/.github/workflows/markdownlint.yml
+++ b/.github/workflows/markdownlint.yml
@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-    - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 #@v2
+    - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 #@v2
     - name: Use Node.js
       uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 #@v1
       with:
diff --git a/.github/workflows/publish-mono-samples.yml b/.github/workflows/publish-mono-samples.yml
index 5e2d0119f5c..efbb9f469e9 100644
--- a/.github/workflows/publish-mono-samples.yml
+++ b/.github/workflows/publish-mono-samples.yml
@@ -23,7 +23,7 @@ jobs:
   build-mono:
     runs-on: macos-latest
     steps:
-    - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 #@v2
+    - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 #@v2
     - name: Setup .NET SDK 6
       if: ${{ env.DOTNET_DO_INSTALL == 'true' }}
       run: |
diff --git a/.github/workflows/snippets5000.yml b/.github/workflows/snippets5000.yml
index b94b5d652df..3a5c2dc7a6b 100644
--- a/.github/workflows/snippets5000.yml
+++ b/.github/workflows/snippets5000.yml
@@ -32,7 +32,7 @@ jobs:
     # Steps represent a sequence of tasks that will be executed as part of the job
     steps:
     # Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
-    - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 #@v2.7.0
+    - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 #@v4.1.7
 
     # Get the latest preview SDK (or sdk not installed by the runner)
     - name: Setup .NET SDK