diff --git a/.github/workflows/retire.yml b/.github/workflows/retire.yml
index a43d2cd3..2978c4d9 100644
--- a/.github/workflows/retire.yml
+++ b/.github/workflows/retire.yml
@@ -58,7 +58,7 @@ jobs:
             echo "${PID}.yaml already exists!"
             exit 1
           fi
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0  # v7.0.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1  # v7.0.1
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
       - name: Set up Ruby
diff --git a/.github/workflows/website.yml b/.github/workflows/website.yml
index 15f8bb91..6168b0c2 100644
--- a/.github/workflows/website.yml
+++ b/.github/workflows/website.yml
@@ -34,19 +34,19 @@ jobs:
 
     steps:
       - name: 🗂 Checkout
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0  # v7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1  # v7.0.1
         with:
           fetch-depth: 1
       - name: 🗂 Checkout asf-site branch with minimum depth (main only)
         if: ${{ (github.head_ref || github.ref_name) == 'main' }}
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0  # 7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1  # 7.0.1
         with:
           ref: asf-site
           fetch-depth: 1
           path: asf-site
       - name: 🗂 Checkout cwiki-retired branch with minimum depth (main only)
         if: ${{ (github.head_ref || github.ref_name) == 'main' }}
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0  # 7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1  # 7.0.1
         with:
           ref: cwiki-retired
           fetch-depth: 1