diff --git a/.github/workflows/docker-build-push-ecr.yaml b/.github/workflows/docker-build-push-ecr.yaml
index 0a78f5c5..6da36506 100644
--- a/.github/workflows/docker-build-push-ecr.yaml
+++ b/.github/workflows/docker-build-push-ecr.yaml
@@ -56,7 +56,7 @@ jobs:
       contents: read
     steps:
       - name: Check out code
-        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
+        uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4
 
       - name: Download artifacts to pass to docker build
         if: ${{ inputs.artifact_name || inputs.artifact_path }} # avoid downloading artifacts if not needed
diff --git a/.github/workflows/docker-build.yaml b/.github/workflows/docker-build.yaml
index 79af0b97..6e702829 100644
--- a/.github/workflows/docker-build.yaml
+++ b/.github/workflows/docker-build.yaml
@@ -28,7 +28,7 @@ jobs:
       contents: read
     steps:
       - name: Check out code
-        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
+        uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4
 
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@d70bba72b1f3fd22344832f00baa16ece964efeb # v3
diff --git a/.github/workflows/gh-release-on-main.yaml b/.github/workflows/gh-release-on-main.yaml
index 336dca2a..494c6694 100644
--- a/.github/workflows/gh-release-on-main.yaml
+++ b/.github/workflows/gh-release-on-main.yaml
@@ -11,7 +11,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
+        uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4
 
       - name: Retrieve Merge Commit Message
         id: merge_commit_message
diff --git a/.github/workflows/gh-release.yaml b/.github/workflows/gh-release.yaml
index 9b9bf0d5..c3bddb9b 100644
--- a/.github/workflows/gh-release.yaml
+++ b/.github/workflows/gh-release.yaml
@@ -16,7 +16,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
+        uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4
       - name: Release
         uses: softprops/action-gh-release@c062e08bd532815e2082a85e87e3ef29c3e6d191 # v2
         with:
diff --git a/.github/workflows/lambda-build-node.yaml b/.github/workflows/lambda-build-node.yaml
index c4e91a0a..3f1b4e8d 100644
--- a/.github/workflows/lambda-build-node.yaml
+++ b/.github/workflows/lambda-build-node.yaml
@@ -32,7 +32,7 @@ jobs:
         working-directory: ${{ inputs.source_dir || vars.source_dir || 'src'}}
     steps:
       - name: Checkout
-        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
+        uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4
 
       - name: Build
         id: build
diff --git a/.github/workflows/lambda-nodejs.yaml b/.github/workflows/lambda-nodejs.yaml
index 972d6094..afaa4cae 100644
--- a/.github/workflows/lambda-nodejs.yaml
+++ b/.github/workflows/lambda-nodejs.yaml
@@ -33,7 +33,7 @@ jobs:
         working-directory: ${{ env.SOURCE_DIR }}
     steps:
       - name: Checkout
-        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
+        uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4
 
       - name: Set up Node.js
         uses: actions/setup-node@v4
diff --git a/.github/workflows/publish-docs.yaml b/.github/workflows/publish-docs.yaml
index 73dd4583..f0536ad3 100644
--- a/.github/workflows/publish-docs.yaml
+++ b/.github/workflows/publish-docs.yaml
@@ -18,7 +18,7 @@ jobs:
       contents: write
     steps:
       - name: Checkout main
-        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
+        uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/tf-apply.yaml b/.github/workflows/tf-apply.yaml
index 5bc9f694..325b1303 100644
--- a/.github/workflows/tf-apply.yaml
+++ b/.github/workflows/tf-apply.yaml
@@ -68,7 +68,7 @@ jobs:
       TF_VARS: ${{ inputs.tf_vars || vars.tf_vars }}
     steps:
       - name: Checkout
-        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
+        uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4
 
       - name: Configure AWS Credentials
         uses: aws-actions/configure-aws-credentials@e3dd6a429d7300a6a4c196c26e071d42e0343502 # v4
diff --git a/.github/workflows/tf-cleanup.yaml b/.github/workflows/tf-cleanup.yaml
index fb168c98..0073f2d0 100644
--- a/.github/workflows/tf-cleanup.yaml
+++ b/.github/workflows/tf-cleanup.yaml
@@ -65,7 +65,7 @@ jobs:
           echo "TF_WORKSPACE=$SANITISED_WORKSPACE" >> $GITHUB_ENV
 
       - name: Checkout
-        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
+        uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4
 
       - name: Configure AWS Credentials
         uses: aws-actions/configure-aws-credentials@e3dd6a429d7300a6a4c196c26e071d42e0343502 # v4
diff --git a/.github/workflows/tf-destroy.yaml b/.github/workflows/tf-destroy.yaml
index 16f66849..d8a7e633 100644
--- a/.github/workflows/tf-destroy.yaml
+++ b/.github/workflows/tf-destroy.yaml
@@ -53,7 +53,7 @@ jobs:
       TF_VARS: ${{ inputs.tf_vars || vars.tf_vars }}
     steps:
       - name: Checkout
-        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
+        uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4
 
       - name: Configure AWS Credentials
         uses: aws-actions/configure-aws-credentials@e3dd6a429d7300a6a4c196c26e071d42e0343502 # v4
diff --git a/.github/workflows/tf-feature.yaml b/.github/workflows/tf-feature.yaml
index 84bb0832..e0bea02e 100644
--- a/.github/workflows/tf-feature.yaml
+++ b/.github/workflows/tf-feature.yaml
@@ -74,7 +74,7 @@ jobs:
           echo "TF_WORKSPACE=$SANITISED_WORKSPACE" >> $GITHUB_ENV
 
       - name: Checkout
-        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
+        uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4
 
       - name: Configure AWS Credentials
         uses: aws-actions/configure-aws-credentials@e3dd6a429d7300a6a4c196c26e071d42e0343502 # v4
diff --git a/.github/workflows/tf-plan.yaml b/.github/workflows/tf-plan.yaml
index d5e60ce7..b7482f36 100644
--- a/.github/workflows/tf-plan.yaml
+++ b/.github/workflows/tf-plan.yaml
@@ -68,7 +68,7 @@ jobs:
       TF_VARS: ${{ inputs.tf_vars || vars.tf_vars }}
     steps:
       - name: Checkout
-        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
+        uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4
 
       - name: Configure AWS Credentials
         uses: aws-actions/configure-aws-credentials@e3dd6a429d7300a6a4c196c26e071d42e0343502 # v4