diff --git a/.github/workflows/actions.yml b/.github/workflows/actions.yml
index 3128530..c32ef67 100644
--- a/.github/workflows/actions.yml
+++ b/.github/workflows/actions.yml
@@ -16,7 +16,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 5
     steps:
-      - uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c
+      - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633
       - uses: ./actions/setup-tools
       - run: just-dev lint-actions
 
@@ -24,7 +24,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 5
     steps:
-      - uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c
+      - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633
       - uses: ./actions/setup-tools
       - run: just-dev check-action-images
 
@@ -32,7 +32,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 10
     steps:
-      - uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c
+      - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633
       - uses: ./actions/setup-tools
       - run: just-dev pull-action-images
 
@@ -40,7 +40,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 5
     steps:
-      - uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c
+      - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633
       - uses: ./actions/setup-tools
       - run: which just
       - run: just --version
@@ -55,7 +55,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 5
     steps:
-      - uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c
+      - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633
       - uses: ./actions/setup-go
       - run: which go
       - run: go version
@@ -64,7 +64,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 5
     steps:
-      - uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c
+      - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633
       - uses: ./actions/setup-rust
       - run: which cargo
       - run: cargo version
diff --git a/.github/workflows/devcontainer.yml b/.github/workflows/devcontainer.yml
index 25792a5..6fbf82d 100644
--- a/.github/workflows/devcontainer.yml
+++ b/.github/workflows/devcontainer.yml
@@ -15,21 +15,21 @@ jobs:
   dev-build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c
+      - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633
       - uses: ./actions/setup-tools
       - run: just build
 
   dev-shellcheck:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c
+      - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633
       - uses: ./actions/setup-tools
       - run: just-sh
 
   dev-pull:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c
+      - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633
       - uses: ./actions/setup-tools
       - run: just-dev pull-dev-image
 
@@ -37,7 +37,7 @@ jobs:
     timeout-minutes: 5
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c
+      - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633
       - uses: DavidAnson/markdownlint-cli2-action@5b7c9f74fec47e6b15667b2cc23c63dff11e449e
         with:
           globs: |
diff --git a/.github/workflows/k3d.yml b/.github/workflows/k3d.yml
index 15f53e8..7c98ca4 100644
--- a/.github/workflows/k3d.yml
+++ b/.github/workflows/k3d.yml
@@ -20,7 +20,7 @@ jobs:
     continue-on-error: true
     steps:
       - run: sudo apt-get update && sudo apt-get install -y skopeo
-      - uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c
+      - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633
       - uses: ./actions/setup-tools
       - run: just sync-k3s-images
       - run: git diff --exit-code
@@ -30,7 +30,7 @@ jobs:
     timeout-minutes: 10
     steps:
       - run: sudo apt-get update && sudo apt-get install -y jq
-      - uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c
+      - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633
       - name: Load k3s-images.json
         id: matrix
         run: |
@@ -51,7 +51,7 @@ jobs:
         include: ${{ fromJson(needs.k3s-matrix.outputs.include) }}
     timeout-minutes: 10
     steps:
-      - uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c
+      - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633
       - uses: ./actions/setup-tools
       - run: bin/just-k3d K3S_IMAGES_JSON=k3s-images.json K3S_CHANNEL='${{ matrix.channel }}' create use
       - name: Check that server tag is ${{ matrix.tag }}