diff --git a/.github/workflows/build_and_deploy.yml b/.github/workflows/build_and_deploy.yml
index 543077c1..746d7ebc 100644
--- a/.github/workflows/build_and_deploy.yml
+++ b/.github/workflows/build_and_deploy.yml
@@ -29,7 +29,7 @@ jobs:
       # NOTE - THIS CHECKOUT MAY CONTAIN UNTRUSTED CODE
       # TO AVOID SECRET DISCLOSURE, IT MUST ONLY RUN IN THE SANDBOXED AZURE BUILD ENVIRONMENT
       - name: Checkout from PR
-        uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           persist-credentials: false
           # conditional - https://github.community/t/possible-to-use-conditional-in-the-env-section-of-a-job/135170/2
diff --git a/.github/workflows/scrape.yml b/.github/workflows/scrape.yml
index d33a2f04..245dd67e 100644
--- a/.github/workflows/scrape.yml
+++ b/.github/workflows/scrape.yml
@@ -19,7 +19,7 @@ jobs:
         session: ['1 S1', '2 S2', '3 X1', '4 X2', '5 X3', '6 X4']
 
     steps:
-      - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - uses: actions/setup-python@v5.2.0
         with: