diff --git a/.github/workflows/awscli.yml b/.github/workflows/awscli.yml
index f535255..d7f80e3 100644
--- a/.github/workflows/awscli.yml
+++ b/.github/workflows/awscli.yml
@@ -36,7 +36,7 @@ jobs:
         os: [macos-latest, windows-latest, ubuntu-latest]
     steps:
       - name: Checkout
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v6
         with:
           persist-credentials: false
 
diff --git a/.github/workflows/cloudfront_invalidate.yml b/.github/workflows/cloudfront_invalidate.yml
index 829821b..d05e4d6 100644
--- a/.github/workflows/cloudfront_invalidate.yml
+++ b/.github/workflows/cloudfront_invalidate.yml
@@ -31,7 +31,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v6
         with:
           persist-credentials: false
 
diff --git a/.github/workflows/iam_access_credentials.yml b/.github/workflows/iam_access_credentials.yml
index 9c49324..b15377d 100644
--- a/.github/workflows/iam_access_credentials.yml
+++ b/.github/workflows/iam_access_credentials.yml
@@ -34,7 +34,7 @@ jobs:
         os: [macos-latest, windows-latest, ubuntu-latest]
     steps:
       - name: Checkout
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v6
         with:
           persist-credentials: false
 
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 64ba0d1..79f86bb 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -27,7 +27,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v6
         with:
           fetch-depth: 0
           persist-credentials: false
@@ -43,7 +43,7 @@ jobs:
 
       - name: Create release
         if: steps.git-cliff.outputs.version != '' && steps.git-cliff.outputs.content != ''
-        uses: softprops/action-gh-release@b4309332981a82ec1c5618f44dd2e27cc8bfbfda # v3
+        uses: softprops/action-gh-release@718ea10b132b3b2eba29c1007bb80653f286566b # v3
         with:
           tag_name: ${{ steps.git-cliff.outputs.version }}
           body: ${{ steps.git-cliff.outputs.content }}
diff --git a/.github/workflows/s3_sync.yml b/.github/workflows/s3_sync.yml
index bcdd73b..55a11af 100644
--- a/.github/workflows/s3_sync.yml
+++ b/.github/workflows/s3_sync.yml
@@ -36,7 +36,7 @@ jobs:
         os: [macos-latest, windows-latest, ubuntu-latest]
     steps:
       - name: Checkout
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v6
         with:
           persist-credentials: false
 
diff --git a/.github/workflows/stale-actions.yml b/.github/workflows/stale-actions.yml
index dc8af41..f235548 100644
--- a/.github/workflows/stale-actions.yml
+++ b/.github/workflows/stale-actions.yml
@@ -13,7 +13,7 @@ jobs:
     name: Mark or close stale issues and PRs
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/stale@eb5cf3af3ac0a1aa4c9c45633dd1ae542a27a899 # v10
+      - uses: actions/stale@1e223db275d687790206a7acac4d1a11bd6fe629 # v10
         with:
           days-before-stale: 30
           stale-issue-label: stale
diff --git a/.github/workflows/verify-build.yml b/.github/workflows/verify-build.yml
index 212991b..a96de57 100644
--- a/.github/workflows/verify-build.yml
+++ b/.github/workflows/verify-build.yml
@@ -43,7 +43,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v6
         with:
           persist-credentials: false