diff --git a/.github/workflows/create-release-pr.yaml b/.github/workflows/create-release-pr.yaml
index fe12f2d..bb2d7c6 100644
--- a/.github/workflows/create-release-pr.yaml
+++ b/.github/workflows/create-release-pr.yaml
@@ -66,7 +66,7 @@ jobs:
           echo "branch=${head}  base=${base}  token=${token}  repo=${repo_name}"
 
       - name: Checkout base
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
         with:
           ref: ${{ steps.parse.outputs.base }}
           fetch-depth: 0
diff --git a/.github/workflows/yaml-diff.yaml b/.github/workflows/yaml-diff.yaml
index 7faed45..11364e6 100644
--- a/.github/workflows/yaml-diff.yaml
+++ b/.github/workflows/yaml-diff.yaml
@@ -71,7 +71,7 @@ jobs:
       pull-requests: write
     if: github.event_name == 'pull_request' && needs.check-cmp-state.outputs.suspend_comment_id == 0 && needs.check-cmp-state.outputs.suspend_diffs_printing_from_pr_body == 'false'
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
         with:
           persist-credentials: false
           fetch-depth: 0