diff --git a/.github/workflows/check-sdk-compat.yml b/.github/workflows/check-sdk-compat.yml
index a4e84478..0a46e99f 100644
--- a/.github/workflows/check-sdk-compat.yml
+++ b/.github/workflows/check-sdk-compat.yml
@@ -46,7 +46,7 @@ jobs:
           echo "API_REF=$API_REF" | tee -a "$GITHUB_OUTPUT"
 
       - name: Checkout
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           repository: temporalio/sdk-go
           ref: ${{ steps.inputs.outputs.SDK_REF }}
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index c99f3fad..fb6cac43 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -11,7 +11,7 @@ jobs:
     steps:
       - name: Print build information
         run: 'echo head_ref: "$GITHUB_HEAD_REF", ref: "$GITHUB_REF"'
-      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           submodules: recursive
       - name: Install protoc
diff --git a/.github/workflows/create-release.yml b/.github/workflows/create-release.yml
index 851a04d6..fbcfe00a 100644
--- a/.github/workflows/create-release.yml
+++ b/.github/workflows/create-release.yml
@@ -40,7 +40,7 @@ jobs:
           owner: ${{ github.repository_owner }}
 
       - name: Checkout
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           repository: temporalio/api-go
           ref: ${{ inputs.ref }}
diff --git a/.github/workflows/update-proto.yml b/.github/workflows/update-proto.yml
index 8d99b160..08267584 100644
--- a/.github/workflows/update-proto.yml
+++ b/.github/workflows/update-proto.yml
@@ -35,7 +35,7 @@ jobs:
           private-key: ${{ secrets.TEMPORAL_CICD_PRIVATE_KEY }}
 
       - name: Checkout
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           token: ${{ steps.generate_token.outputs.token }}
           persist-credentials: true