diff --git a/.github/workflows/_build-and-push.yml b/.github/workflows/_build-and-push.yml
index 32f1ea4ec7..2770781099 100644
--- a/.github/workflows/_build-and-push.yml
+++ b/.github/workflows/_build-and-push.yml
@@ -76,7 +76,7 @@ jobs:
             run_integration_tests: 'false'
             artifact_to_dl: ''
     steps:
-      - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938
+      - uses: actions/checkout@de5a000abf73b6f4965bd1bcdf8f8d94a56ea815
 
       - name: cache node modules
         id: cache-npm
diff --git a/.github/workflows/_codecov.yml b/.github/workflows/_codecov.yml
index 326010582b..51709a0678 100644
--- a/.github/workflows/_codecov.yml
+++ b/.github/workflows/_codecov.yml
@@ -15,7 +15,7 @@ jobs:
   code_coverage:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # pin@v3
+      - uses: actions/checkout@de5a000abf73b6f4965bd1bcdf8f8d94a56ea815 # pin@v3
       - name: download artifact for front tests
         id: download-artifact-front-tests
         uses: actions/download-artifact@d0ce8fd1167ed839810201de977912a090ab10a7
diff --git a/.github/workflows/_ecr-scanning.yml b/.github/workflows/_ecr-scanning.yml
index ac0521606d..85ad9116b1 100644
--- a/.github/workflows/_ecr-scanning.yml
+++ b/.github/workflows/_ecr-scanning.yml
@@ -15,7 +15,7 @@ jobs:
   ecr-scan-results:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # pin@v3
+      - uses: actions/checkout@de5a000abf73b6f4965bd1bcdf8f8d94a56ea815 # pin@v3
 
       - name: configure AWS credentials ECR scan results
         uses: aws-actions/configure-aws-credentials@73daff1b20af655c574cf2018ed2cc18a597bf5c # pin@v1.7.0
diff --git a/.github/workflows/_lint-terraform.yml b/.github/workflows/_lint-terraform.yml
index 7c34e63038..d0439d6625 100644
--- a/.github/workflows/_lint-terraform.yml
+++ b/.github/workflows/_lint-terraform.yml
@@ -21,7 +21,7 @@ jobs:
           - folder: 'environment'
           - folder: 'account'
     steps:
-      - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # pin@v3
+      - uses: actions/checkout@de5a000abf73b6f4965bd1bcdf8f8d94a56ea815 # pin@v3
 
       - name: Set Terraform version
         working-directory: ./terraform/${{ matrix.folder }}
diff --git a/.github/workflows/_node-build.yml b/.github/workflows/_node-build.yml
index 1df7cbe466..c57bd25f34 100644
--- a/.github/workflows/_node-build.yml
+++ b/.github/workflows/_node-build.yml
@@ -11,7 +11,7 @@ jobs:
   build-web:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # pin@v3
+      - uses: actions/checkout@de5a000abf73b6f4965bd1bcdf8f8d94a56ea815 # pin@v3
       - uses: actions/setup-node@aca7b64a59c0063db8564e0ffdadd3887f1cbae5 # pin@v3.6.0
         with:
           node-version-file: '.nvmrc'
diff --git a/.github/workflows/_node-test.yml b/.github/workflows/_node-test.yml
index e88397de5b..4152ffb54a 100644
--- a/.github/workflows/_node-test.yml
+++ b/.github/workflows/_node-test.yml
@@ -11,7 +11,7 @@ jobs:
   unit-test:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # pin@v3
+      - uses: actions/checkout@de5a000abf73b6f4965bd1bcdf8f8d94a56ea815 # pin@v3
       - uses: actions/setup-node@aca7b64a59c0063db8564e0ffdadd3887f1cbae5 # pin@v3.6.0
         with:
           node-version-file: '.nvmrc'
diff --git a/.github/workflows/_run-behat-tests.yml b/.github/workflows/_run-behat-tests.yml
index 4e641dec3f..56add8b93f 100644
--- a/.github/workflows/_run-behat-tests.yml
+++ b/.github/workflows/_run-behat-tests.yml
@@ -16,7 +16,7 @@ jobs:
   build-web:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # pin@v3
+      - uses: actions/checkout@de5a000abf73b6f4965bd1bcdf8f8d94a56ea815 # pin@v3
 
       - name: install python
         uses: actions/setup-python@e9675cc634901ff55d92c575ecd6945e65464b00 # pin@v4.2.0
diff --git a/.github/workflows/_run-terraform.yml b/.github/workflows/_run-terraform.yml
index 83efcc1144..0e843739a1 100644
--- a/.github/workflows/_run-terraform.yml
+++ b/.github/workflows/_run-terraform.yml
@@ -58,7 +58,7 @@ jobs:
             echo "admin-tag=$(echo ${TAG})" >> $GITHUB_OUTPUT
           fi
 
-      - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # pin@v3
+      - uses: actions/checkout@de5a000abf73b6f4965bd1bcdf8f8d94a56ea815 # pin@v3
         with:
           fetch-depth: '0'
 
diff --git a/.github/workflows/_seed-database.yml b/.github/workflows/_seed-database.yml
index e139e43088..a21f8bb7c2 100644
--- a/.github/workflows/_seed-database.yml
+++ b/.github/workflows/_seed-database.yml
@@ -10,7 +10,7 @@ jobs:
   terraform_workflow:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # pin@v3
+      - uses: actions/checkout@de5a000abf73b6f4965bd1bcdf8f8d94a56ea815 # pin@v3
         with:
           fetch-depth: '0'
 
diff --git a/.github/workflows/_slack-notification.yml b/.github/workflows/_slack-notification.yml
index 8adff35567..83d9b09f19 100644
--- a/.github/workflows/_slack-notification.yml
+++ b/.github/workflows/_slack-notification.yml
@@ -28,7 +28,7 @@ jobs:
   send-slack-notification:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # pin@v3
+      - uses: actions/checkout@de5a000abf73b6f4965bd1bcdf8f8d94a56ea815 # pin@v3
 
       - name: install python
         uses: actions/setup-python@e9675cc634901ff55d92c575ecd6945e65464b00 # pin@v4.2.0
diff --git a/.github/workflows/path-to-live.yml b/.github/workflows/path-to-live.yml
index 2f8bdf3d52..2c02f2e490 100644
--- a/.github/workflows/path-to-live.yml
+++ b/.github/workflows/path-to-live.yml
@@ -34,7 +34,7 @@ jobs:
       short_sha:  ${{ steps.variables.outputs.short_sha }}
       semver_tag: ${{ steps.semver_tag.outputs.created_tag }}
     steps:
-      - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # pin@v3
+      - uses: actions/checkout@de5a000abf73b6f4965bd1bcdf8f8d94a56ea815 # pin@v3
       - name: extract variables for workflow
         id: variables
         run: |
@@ -90,7 +90,7 @@ jobs:
       - workflow_variables
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # pin@v3
+      - uses: actions/checkout@de5a000abf73b6f4965bd1bcdf8f8d94a56ea815 # pin@v3
       - name: download artifact for front tests
         uses: actions/download-artifact@d0ce8fd1167ed839810201de977912a090ab10a7
         with:
@@ -200,7 +200,7 @@ jobs:
     needs:
       - terraform_apply_production
     steps:
-      - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # pin@v3
+      - uses: actions/checkout@de5a000abf73b6f4965bd1bcdf8f8d94a56ea815 # pin@v3
         with:
           fetch-depth: '0'
       - name: download cluster_config
diff --git a/.github/workflows/pull-request-path.yml b/.github/workflows/pull-request-path.yml
index 491c9bc62d..e233c8a891 100644
--- a/.github/workflows/pull-request-path.yml
+++ b/.github/workflows/pull-request-path.yml
@@ -41,7 +41,7 @@ jobs:
       short_sha:  ${{ steps.variables.outputs.short_sha }}
       specific_path: ${{ steps.variables.outputs.path }}
     steps:
-      - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # pin@v3
+      - uses: actions/checkout@de5a000abf73b6f4965bd1bcdf8f8d94a56ea815 # pin@v3
         with:
           fetch-depth: 2
       - name: get changed files in the admin folder
diff --git a/.github/workflows/scheduled-codeql-analysis.yml b/.github/workflows/scheduled-codeql-analysis.yml
index 0b753a685f..58307f8d10 100644
--- a/.github/workflows/scheduled-codeql-analysis.yml
+++ b/.github/workflows/scheduled-codeql-analysis.yml
@@ -30,7 +30,7 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # pin@v3
+      uses: actions/checkout@de5a000abf73b6f4965bd1bcdf8f8d94a56ea815 # pin@v3
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
diff --git a/.github/workflows/scheduled-tfsec.yml b/.github/workflows/scheduled-tfsec.yml
index 2389b639a4..f9ec650dbe 100644
--- a/.github/workflows/scheduled-tfsec.yml
+++ b/.github/workflows/scheduled-tfsec.yml
@@ -13,7 +13,7 @@ jobs:
       contents: read
       security-events: write
     steps:
-      - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # pin@v3
+      - uses: actions/checkout@de5a000abf73b6f4965bd1bcdf8f8d94a56ea815 # pin@v3
         with:
           persist-credentials: false
 
diff --git a/.github/workflows/scheduled-workspace-cleanup.yml b/.github/workflows/scheduled-workspace-cleanup.yml
index ae3350ee56..7c121f00e8 100644
--- a/.github/workflows/scheduled-workspace-cleanup.yml
+++ b/.github/workflows/scheduled-workspace-cleanup.yml
@@ -22,7 +22,7 @@ jobs:
   terraform_environment_cleanup:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # pin@v3
+      - uses: actions/checkout@de5a000abf73b6f4965bd1bcdf8f8d94a56ea815 # pin@v3
 
       - name: Set Terraform version
         working-directory: ./terraform/environment
diff --git a/.github/workflows/trivy_scan_alert_report.yml b/.github/workflows/trivy_scan_alert_report.yml
index 79039b306e..7763669450 100644
--- a/.github/workflows/trivy_scan_alert_report.yml
+++ b/.github/workflows/trivy_scan_alert_report.yml
@@ -12,7 +12,7 @@ jobs:
   trivy_scan_alert_report:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # pin@v3
+      - uses: actions/checkout@de5a000abf73b6f4965bd1bcdf8f8d94a56ea815 # pin@v3
 
       - name: install python
         uses: actions/setup-python@e9675cc634901ff55d92c575ecd6945e65464b00 # pin@v4.2.0
diff --git a/.github/workflows/workflow-deploy-ref-to-env.yml b/.github/workflows/workflow-deploy-ref-to-env.yml
index 879f8bdf54..4741c07bf3 100644
--- a/.github/workflows/workflow-deploy-ref-to-env.yml
+++ b/.github/workflows/workflow-deploy-ref-to-env.yml
@@ -53,7 +53,7 @@ jobs:
       short_sha:  ${{ steps.variables.outputs.short_sha }}
       specific_path: ${{ steps.variables.outputs.path }}
     steps:
-      - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # pin@v4
+      - uses: actions/checkout@de5a000abf73b6f4965bd1bcdf8f8d94a56ea815 # pin@v4
         with:
           fetch-depth: 2
           ref: ${{ inputs.git_ref }}