diff --git a/.github/workflows/policy.opa.yaml b/.github/workflows/policy.opa.yaml
index 86d81122..261e0fc7 100644
--- a/.github/workflows/policy.opa.yaml
+++ b/.github/workflows/policy.opa.yaml
@@ -28,7 +28,7 @@ jobs:
       github.event_name == 'workflow_dispatch' && github.event.inputs.push == 'true'
       || github.event_name == 'push' && (github.event.created == false && github.event.forced == false)
     steps:
-      - uses: actions/checkout@v4.1.1
+      - uses: actions/checkout@v4.1.6
 
       - name: Login to Registry
         run: |
@@ -87,7 +87,7 @@ jobs:
       github.event_name == 'workflow_dispatch' && github.event.inputs.push == 'false'
       || github.event_name == 'push' && (github.event.created == true || github.event.forced == true)
     steps:
-      - uses: actions/checkout@v4.1.1
+      - uses: actions/checkout@v4.1.6
 
       - uses: brpaz/hadolint-action@v1.5.0
         env: