diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 1ee3683..8e57b26 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -35,7 +35,7 @@ jobs:
             docker_platform: linux/arm64
     steps:
       - name: Checkout
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.2.2
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4.2.2
       - name: Cache Key Calculation
         id: cache-key
         run: echo "key=hardened-deps-${{ matrix.libc }}-${{ matrix.arch }}-v1.3.1-v3.1.4.1" >> $GITHUB_OUTPUT
@@ -106,7 +106,7 @@ jobs:
             skipTests: true
 
     steps:
-      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.2.2
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4.2.2
 
       - name: Restore Hardened Deps (Linux)
         if: runner.os == 'Linux'
@@ -197,7 +197,7 @@ jobs:
             platform: linux-musl-arm64
             docker_platform: linux/arm64
     steps:
-      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.2.2
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4.2.2
       - name: Restore Hardened Deps (Musl)
         uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.2.2
         with:
@@ -247,7 +247,7 @@ jobs:
       matrix:
         arch: [x64, arm64]
     steps:
-      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.2.2
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4.2.2
       - name: Download Artifacts
         uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.1.7
         with:
@@ -269,7 +269,7 @@ jobs:
       matrix:
         arch: [x64, arm64]
     steps:
-      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.2.2
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4.2.2
       - name: Download Artifacts
         uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.1.7
         with:
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index cfab6a7..a150c41 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -33,7 +33,7 @@ jobs:
             docker_platform: linux/arm64
     steps:
       - name: Checkout
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.2.2
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4.2.2
       - name: Cache Key Calculation
         id: cache-key
         run: echo "key=hardened-deps-${{ matrix.libc }}-${{ matrix.arch }}-v1.3.1-v3.1.4.1" >> $GITHUB_OUTPUT
@@ -99,7 +99,7 @@ jobs:
             arch: x64
 
     steps:
-      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.2.2
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4.2.2
 
       - name: Restore Hardened Deps (Linux)
         if: runner.os == 'Linux'
@@ -164,7 +164,7 @@ jobs:
             platform: linux-musl-arm64
             docker_platform: linux/arm64
     steps:
-      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.2.2
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4.2.2
       - name: Restore Hardened Deps (Musl)
         uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.2.2
         with:
@@ -191,7 +191,7 @@ jobs:
     needs: [build-native-artifacts, build-musl-artifacts]
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.2.2
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4.2.2
 
       - name: Download all shims
         uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.1.7