diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index c698b7e..f9fe98b 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -26,7 +26,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: Validate workflow, issue-form and Dependabot YAML
         run: |
@@ -102,14 +102,14 @@ jobs:
     runs-on: windows-latest
     steps:
       - name: Checkout ANVIL
-        uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           path: anvil
 
       - name: Checkout PicoGK as a sibling directory
         id: picogk
         continue-on-error: true
-        uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           repository: Kevofehr/PicoGK
           # Pinned to the exact commit the ANVIL worker is developed against.