diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 5c3e5cb..76317fa 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -32,7 +32,7 @@ jobs:
         if: env.image-exists != 'true'
       - name: Checkout code
         if: env.image-exists != 'true'
-        uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
+        uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
       - name: Download and verify kubectl
         if: env.image-exists != 'true'
         run: ./download-kubectl.sh ${{ env.kubectl_ver }}
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 3ba8766..677c43e 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -14,5 +14,5 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
+        uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
       - run: shellcheck $(find . -name '*.sh')