diff --git a/.github/workflows/build_and_test.yml b/.github/workflows/build_and_test.yml
index b846d006dadb0..2bb12e030a16d 100644
--- a/.github/workflows/build_and_test.yml
+++ b/.github/workflows/build_and_test.yml
@@ -35,7 +35,7 @@ jobs:
       with:
         node-version: "12.22.1"
 
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.1.0
 
     - name: Free disk space
       run: |
@@ -226,7 +226,7 @@ jobs:
         docker exec mongo mongo --eval 'rs.initiate({_id:"rs0", members: [{"_id":1, "host":"localhost:27017"}]})'
         docker exec mongo mongo --eval 'rs.status()'
 
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.1.0
 
     - name: Cache cypress
       id: cache-cypress
@@ -282,7 +282,7 @@ jobs:
         release: ["official", "preview"]
 
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.1.0
 
     - name: Login to GitHub Container Registry
       uses: docker/login-action@v1
@@ -406,7 +406,7 @@ jobs:
     needs: test
 
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.1.0
 
     - name: Restore build
       uses: actions/download-artifact@v2
@@ -490,7 +490,7 @@ jobs:
       IMAGE: "rocketchat/rocket.chat"
 
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.1.0
 
     - name: Login to DockerHub
       uses: docker/login-action@v1
@@ -564,7 +564,7 @@ jobs:
         service: ["account", "authorization", "ddp-streamer", "presence", "stream-hub"]
 
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.1.0
 
     - name: Use Node.js 12.22.1
       uses: actions/setup-node@v2
diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index da9570060ed49..6dd5b12ca44ad 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -14,7 +14,7 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v2
+      uses: actions/checkout@v3.1.0
       with:
         # We must fetch at least the immediate parents so that if this is
         # a pull request then we can checkout the head.