diff --git a/.github/workflows/archive-sync.yaml b/.github/workflows/archive-sync.yaml
index 380307d6da91..17a07a11e7bb 100644
--- a/.github/workflows/archive-sync.yaml
+++ b/.github/workflows/archive-sync.yaml
@@ -26,7 +26,7 @@ jobs:
 
     # Checkout the Archive repo
     - name: 'Checkout Repository (archive)'
-      uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332  # v4.1.7
+      uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938  # v4.2.0
       with:
         repository: envoyproxy/archive
         ref: main
@@ -34,7 +34,7 @@ jobs:
 
     # Checkout the repo
     - name: 'Checkout Repository (envoy-website)'
-      uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332  # v4.1.7
+      uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938  # v4.2.0
       with:
         ref: main
         token: ${{ steps.appauth.outputs.token  }}
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index d39abf97350f..4c90c023b31d 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -31,7 +31,7 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332  # v4.1.7
+      uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938  # v4.2.0
 
     - name: Initialize CodeQL
       uses: github/codeql-action/init@8214744c546c1e5c8f03dde8fab3a7353211988d  # v3.26.7
diff --git a/.github/workflows/envoy-sync.yaml b/.github/workflows/envoy-sync.yaml
index 380dad726feb..b46a5483c05a 100644
--- a/.github/workflows/envoy-sync.yaml
+++ b/.github/workflows/envoy-sync.yaml
@@ -30,7 +30,7 @@ jobs:
 
     # Checkout the repo
     - name: 'Checkout Repository (envoy-website)'
-      uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332  # v4.1.7
+      uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938  # v4.2.0
       with:
         ref: main
         token: ${{ steps.appauth.outputs.token  }}
@@ -44,7 +44,7 @@ jobs:
 
     # Checkout the Envoy repo
     - name: 'Checkout Repository (envoy)'
-      uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332  # v4.1.7
+      uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938  # v4.2.0
       with:
         repository: envoyproxy/envoy
         ref: main
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index 3717859661d2..6a4ec87710d3 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -21,7 +21,7 @@ jobs:
 
     steps:
     - name: "Checkout code"
-      uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332  # v4.1.7
+      uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938  # v4.2.0
       with:
         persist-credentials: false