diff --git a/.github/workflows/release-please.yml b/.github/workflows/release-please.yml
index 9e63acc..f44dc85 100644
--- a/.github/workflows/release-please.yml
+++ b/.github/workflows/release-please.yml
@@ -19,7 +19,7 @@ jobs:
           release-type: simple
       
       # tag major and minor versions
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
       - name: tag major and minor versions
         if: ${{ steps.release.outputs.release_created }}
         run: |
diff --git a/action.yml b/action.yml
index 374007a..c7b949f 100644
--- a/action.yml
+++ b/action.yml
@@ -199,7 +199,7 @@ runs:
       uses: slsa-framework/slsa-verifier/actions/installer@ea584f4502babc6f60d9bc799dbbb13c1caa9ee6 # v2.7.1
 
     # clones user's repo
-    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+    - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
       if: ${{ inputs.skip_checkout == 'false' }}
       with:
         persist-credentials: false