diff --git a/.github/workflows/ai-fuzzing.yml b/.github/workflows/ai-fuzzing.yml
index 3c490be..ab33eac 100644
--- a/.github/workflows/ai-fuzzing.yml
+++ b/.github/workflows/ai-fuzzing.yml
@@ -18,7 +18,7 @@ jobs:
   ai-fuzz:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - uses: actions/setup-python@v5
         with:
diff --git a/.github/workflows/ai-review.yml b/.github/workflows/ai-review.yml
index cdfbf67..31a4584 100644
--- a/.github/workflows/ai-review.yml
+++ b/.github/workflows/ai-review.yml
@@ -22,7 +22,7 @@ jobs:
   ai-review:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index aa5becc..16f8ba0 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -17,7 +17,7 @@ jobs:
       contents: read
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - name: Initialize CodeQL
         uses: github/codeql-action/init@v3
diff --git a/.github/workflows/container-security.yml b/.github/workflows/container-security.yml
index 701554c..d332174 100644
--- a/.github/workflows/container-security.yml
+++ b/.github/workflows/container-security.yml
@@ -10,7 +10,7 @@ jobs:
   trivy:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - name: Build image
         run: docker build -t app:${{ github.sha }} .
diff --git a/.github/workflows/dast.yml b/.github/workflows/dast.yml
index 03e6246..6203ef9 100644
--- a/.github/workflows/dast.yml
+++ b/.github/workflows/dast.yml
@@ -8,7 +8,7 @@ jobs:
   zap:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - name: Start app
         run: |
diff --git a/.github/workflows/iac-security.yml b/.github/workflows/iac-security.yml
index 4918f6b..da80aa7 100644
--- a/.github/workflows/iac-security.yml
+++ b/.github/workflows/iac-security.yml
@@ -9,7 +9,7 @@ jobs:
   checkov:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - name: Checkov — Dockerfile + Kubernetes
         uses: bridgecrewio/checkov-action@master
diff --git a/.github/workflows/oss-policy.yml b/.github/workflows/oss-policy.yml
index be7c0bf..c4fe988 100644
--- a/.github/workflows/oss-policy.yml
+++ b/.github/workflows/oss-policy.yml
@@ -9,7 +9,7 @@ jobs:
   oss-check:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - name: Generate SBOM
         uses: anchore/sbom-action@v0
diff --git a/.github/workflows/sast.yml b/.github/workflows/sast.yml
index 17a412d..4121375 100644
--- a/.github/workflows/sast.yml
+++ b/.github/workflows/sast.yml
@@ -8,7 +8,7 @@ jobs:
   semgrep:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - name: Semgrep — OWASP Top 10
         uses: semgrep/semgrep-action@v1
diff --git a/.github/workflows/secret-detection.yml b/.github/workflows/secret-detection.yml
index 3c18b5b..4b251bc 100644
--- a/.github/workflows/secret-detection.yml
+++ b/.github/workflows/secret-detection.yml
@@ -10,7 +10,7 @@ jobs:
   gitleaks:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           fetch-depth: 0