diff --git a/.github/workflows/build-python.yaml b/.github/workflows/build-python.yaml
index 3a0af33..0944146 100644
--- a/.github/workflows/build-python.yaml
+++ b/.github/workflows/build-python.yaml
@@ -10,7 +10,7 @@ jobs:
       wheel: ${{ steps.find_wheel.outputs.wheel_path }}
     steps:
       - name: Checkout this repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Set up uv
         uses: astral-sh/setup-uv@v6
diff --git a/.github/workflows/platform-integration-test.yaml b/.github/workflows/platform-integration-test.yaml
index 3cb75be..be2d505 100644
--- a/.github/workflows/platform-integration-test.yaml
+++ b/.github/workflows/platform-integration-test.yaml
@@ -23,14 +23,14 @@ jobs:
     runs-on: ubuntu-22.04
     steps:
       - name: Checkout this repo
-        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
 
       # - uses: bufbuild/buf-setup-action@382440cdb8ec7bc25a68d7b4711163d95f7cc3aa
       #   with:
       #     github_token: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Check out platform
-        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
         with:
           repository: opentdf/platform
           ref: service/v0.8.2
diff --git a/.github/workflows/release-please.yaml b/.github/workflows/release-please.yaml
index 4c4465a..d362730 100644
--- a/.github/workflows/release-please.yaml
+++ b/.github/workflows/release-please.yaml
@@ -24,7 +24,7 @@ jobs:
       releases_created: ${{ steps.release-develop.outputs.releases_created || steps.release-main.outputs.releases_created }}
       paths_released: ${{ steps.release-develop.outputs.paths_released || steps.release-main.outputs.paths_released }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       # Release-please for develop branch (creates alpha prereleases)
       - uses: googleapis/release-please-action@v5
@@ -56,7 +56,7 @@ jobs:
     if: ${{ needs.release-please.outputs.releases_created == 'true' }}
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - name: Install uv
         uses: astral-sh/setup-uv@v6
diff --git a/.github/workflows/test-suite.yaml b/.github/workflows/test-suite.yaml
index 7c42931..4bdd4a0 100644
--- a/.github/workflows/test-suite.yaml
+++ b/.github/workflows/test-suite.yaml
@@ -18,7 +18,7 @@ jobs:
   lint-check:
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - name: Set up uv
         uses: astral-sh/setup-uv@v6
@@ -37,7 +37,7 @@ jobs:
     runs-on: ubuntu-22.04
     needs: lint-check
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - name: Set up uv
         uses: astral-sh/setup-uv@v6
@@ -58,7 +58,7 @@ jobs:
       wheel: ${{ steps.find_wheel.outputs.wheel_path }}
     steps:
       - name: Checkout this repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Set up uv
         uses: astral-sh/setup-uv@v6
@@ -90,7 +90,7 @@ jobs:
     runs-on: ubuntu-22.04
     needs: build
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - name: Set up uv
         uses: astral-sh/setup-uv@v6