diff --git a/.github/workflows/build-test-lint.yaml b/.github/workflows/build-test-lint.yaml
index 93914ad78f..9132c1e4e2 100644
--- a/.github/workflows/build-test-lint.yaml
+++ b/.github/workflows/build-test-lint.yaml
@@ -9,7 +9,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: "Checkout"
-        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - uses: ./.github/actions/gradle-task
         with:
           task: ktfmtCheck
@@ -19,7 +19,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: "Checkout"
-        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - name: Build
         uses: ./.github/actions/gradle-task
         with:
@@ -34,7 +34,7 @@ jobs:
       checks: write
     steps:
       - name: "Checkout"
-        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - name: Test
         uses: ./.github/actions/gradle-task
         with:
@@ -58,7 +58,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: "Checkout"
-        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - name: Build
         uses: ./.github/actions/gradle-task
         with:
diff --git a/.github/workflows/espresso.yaml b/.github/workflows/espresso.yaml
index 1b30f25ce6..1b242d2de3 100644
--- a/.github/workflows/espresso.yaml
+++ b/.github/workflows/espresso.yaml
@@ -30,7 +30,7 @@ jobs:
           sudo df -h
 
       # Github charges us for LFS bandwidth, so let's use the cache
-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
         with:
           lfs: false
       - name: Create LFS file list
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 3712c4b61a..559c2c5609 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -20,7 +20,7 @@ jobs:
     permissions:
       contents: write
     steps:
-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       # We need to find out if there's been a previous beta release for this tag, as it'll affect which google play track we promote from
       - uses: octokit/request-action@v2.x
         name: Find beta tags if this is a prod release
diff --git a/.github/workflows/trunk-build.yaml b/.github/workflows/trunk-build.yaml
index 659fd802ea..bfc388ddad 100644
--- a/.github/workflows/trunk-build.yaml
+++ b/.github/workflows/trunk-build.yaml
@@ -41,7 +41,7 @@ jobs:
       contents: read
     needs: espresso-test
     steps:
-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - name: Create keystore
         run: |
           echo -n "${KEYSTORE_BASE64}" | base64 -d > project/owntracks.release.keystore.jks