diff --git a/.github/workflows/ai-safety.yml b/.github/workflows/ai-safety.yml
index da63acc..4e006cf 100644
--- a/.github/workflows/ai-safety.yml
+++ b/.github/workflows/ai-safety.yml
@@ -12,7 +12,7 @@ jobs:
   safety:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - name: Check for obvious secret patterns
         run: |
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index d100c5a..cfefe6b 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -26,7 +26,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Initialize CodeQL
         uses: github/codeql-action/init@v3
diff --git a/.github/workflows/opencode.yml b/.github/workflows/opencode.yml
index f417889..097de7a 100644
--- a/.github/workflows/opencode.yml
+++ b/.github/workflows/opencode.yml
@@ -19,7 +19,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Show request
         run: |
diff --git a/.github/workflows/repo-health.yml b/.github/workflows/repo-health.yml
index 8cdd64c..8f13090 100644
--- a/.github/workflows/repo-health.yml
+++ b/.github/workflows/repo-health.yml
@@ -13,7 +13,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - name: Repo inventory
         run: |