diff --git a/.github/workflows/assign-ids.yml b/.github/workflows/assign-ids.yml
index a8c45e19..5beefb6e 100644
--- a/.github/workflows/assign-ids.yml
+++ b/.github/workflows/assign-ids.yml
@@ -14,7 +14,7 @@ jobs:
       contents: write # for create-pull-request
       pull-requests: write # for create-pull-request
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
         with:
           persist-credentials: false
 
diff --git a/.github/workflows/export-osv.yml b/.github/workflows/export-osv.yml
index ab4422c1..dfa1f4c4 100644
--- a/.github/workflows/export-osv.yml
+++ b/.github/workflows/export-osv.yml
@@ -12,7 +12,7 @@ jobs:
     permissions:
       contents: write # needed for pushing back to the repo
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
         with:
           ref: osv
           persist-credentials: true # persists the token for git push below
diff --git a/.github/workflows/publish-web.yml b/.github/workflows/publish-web.yml
index c2643c52..e4edad31 100644
--- a/.github/workflows/publish-web.yml
+++ b/.github/workflows/publish-web.yml
@@ -12,7 +12,7 @@ jobs:
     permissions:
       contents: write # needed for pushing back to the repo
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
         with:
           ref: gh-pages
           persist-credentials: true # persists the token for git push below
diff --git a/.github/workflows/sync-ids.yml b/.github/workflows/sync-ids.yml
index 8e37edf9..42a23d65 100644
--- a/.github/workflows/sync-ids.yml
+++ b/.github/workflows/sync-ids.yml
@@ -16,7 +16,7 @@ jobs:
       contents: write # for create-pull-request
       pull-requests: write # for create-pull-request
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
         with:
           persist-credentials: false
 
diff --git a/.github/workflows/validate.yml b/.github/workflows/validate.yml
index f22ce4fb..02f1e345 100644
--- a/.github/workflows/validate.yml
+++ b/.github/workflows/validate.yml
@@ -12,7 +12,7 @@ jobs:
     name: Lint advisories
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
         with:
           persist-credentials: false