diff --git a/.github/workflows/sign-apple-exe-pkcs11.yml b/.github/workflows/sign-apple-exe-pkcs11.yml
index 8373952e6..d042b28df 100644
--- a/.github/workflows/sign-apple-exe-pkcs11.yml
+++ b/.github/workflows/sign-apple-exe-pkcs11.yml
@@ -13,7 +13,7 @@ jobs:
     runs-on: 'ubuntu-24.04'
     timeout-minutes: 15
     steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Install SoftHSM and PKCS#11 tools
         run: |
diff --git a/.github/workflows/sign-apple-exe.yml b/.github/workflows/sign-apple-exe.yml
index 066c09a19..ee1db504e 100644
--- a/.github/workflows/sign-apple-exe.yml
+++ b/.github/workflows/sign-apple-exe.yml
@@ -29,7 +29,7 @@ jobs:
     runs-on: 'ubuntu-22.04'
     timeout-minutes: 10
     steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Download rcodesign Linux executable
         uses: dawidd6/action-download-artifact@9e12ab9856b6504e4969c60998d8fc619347a175
diff --git a/.github/workflows/sphinx.yml b/.github/workflows/sphinx.yml
index 3825d2c58..6332b797c 100644
--- a/.github/workflows/sphinx.yml
+++ b/.github/workflows/sphinx.yml
@@ -17,7 +17,7 @@ jobs:
           - apple-codesign/docs
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - uses: actions/setup-python@83679a892e2d95755f2dac6acb0bfd1e9ac5d548 # v6.1.0
         with:
           python-version: '3.10'
diff --git a/.github/workflows/zizmor.yml b/.github/workflows/zizmor.yml
index 20d4bc64d..8992d0e0a 100644
--- a/.github/workflows/zizmor.yml
+++ b/.github/workflows/zizmor.yml
@@ -14,7 +14,7 @@ jobs:
       security-events: write
     steps:
       - name: Checkout repository
-        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           persist-credentials: false