diff --git a/.github/workflows/docker.build-push.yaml b/.github/workflows/docker.build-push.yaml
index 5befb5e..035b240 100644
--- a/.github/workflows/docker.build-push.yaml
+++ b/.github/workflows/docker.build-push.yaml
@@ -29,7 +29,7 @@ jobs:
       github.event_name == 'workflow_dispatch' && github.event.inputs.push == 'true'
       || github.event_name == 'push' && (github.event.created == false && github.event.forced == false)
     steps:
-      - uses: actions/checkout@v3.0.2
+      - uses: actions/checkout@v4.2.2
 
       - name: login to registry
         run: |
@@ -84,7 +84,7 @@ jobs:
       github.event_name == 'workflow_dispatch' && github.event.inputs.push == 'false'
       || github.event_name == 'push' && (github.event.created == true || github.event.forced == true)
     steps:
-      - uses: actions/checkout@v3.0.2
+      - uses: actions/checkout@v4.2.2
 
       - uses: brpaz/hadolint-action@v1.5.0
         env:
diff --git a/.github/workflows/governance.links-checker.yml b/.github/workflows/governance.links-checker.yml
index a4df872..4e36908 100644
--- a/.github/workflows/governance.links-checker.yml
+++ b/.github/workflows/governance.links-checker.yml
@@ -27,7 +27,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       # checkout to latest commit
-      - uses: actions/checkout@v3.6.0
+      - uses: actions/checkout@v4.2.2
       # run markdown linter
 
       # todo https://github.com/peter-evans/link-checker
diff --git a/.github/workflows/release-draft.yml b/.github/workflows/release-draft.yml
index eb17830..83de32b 100644
--- a/.github/workflows/release-draft.yml
+++ b/.github/workflows/release-draft.yml
@@ -30,7 +30,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
 
-      - uses: actions/checkout@v3.0.2
+      - uses: actions/checkout@v4.2.2
         with:
           fetch-depth: '0'