diff --git a/.github/workflows/_test.yml b/.github/workflows/_test.yml
index 328037863a..fecabc6c1e 100644
--- a/.github/workflows/_test.yml
+++ b/.github/workflows/_test.yml
@@ -34,7 +34,7 @@ jobs:
 
     steps:
       - name: Checkout TUF
-        uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b
+        uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c
 
       - name: Set up Python ${{ matrix.python-version }}
         uses: actions/setup-python@98f2ad02fd48d057ee3b4d4f66525b231c3e52b6
diff --git a/.github/workflows/cd.yml b/.github/workflows/cd.yml
index d1615951c9..580740e819 100644
--- a/.github/workflows/cd.yml
+++ b/.github/workflows/cd.yml
@@ -21,7 +21,7 @@ jobs:
       release_id: ${{ steps.gh-release.outputs.id }}
     steps:
       - name: Checkout release tag
-        uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b
+        uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c
         with:
           ref: ${{ github.event.workflow_run.head_branch }}
 
diff --git a/.github/workflows/specification-version.yml b/.github/workflows/specification-version.yml
index 133da94cf2..31332df975 100644
--- a/.github/workflows/specification-version.yml
+++ b/.github/workflows/specification-version.yml
@@ -14,7 +14,7 @@ jobs:
     name: Open an issue when spec version bumps
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b
+    - uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c
     - uses: actions/setup-python@98f2ad02fd48d057ee3b4d4f66525b231c3e52b6
     - name: Get supported version
       id: get-version