diff --git a/.github/workflows/infra-helm-unittest.yml b/.github/workflows/infra-helm-unittest.yml
index 1a7381d..8b281ed 100644
--- a/.github/workflows/infra-helm-unittest.yml
+++ b/.github/workflows/infra-helm-unittest.yml
@@ -12,7 +12,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-    - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
 
     - name: Set up Docker Buildx
       uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4
diff --git a/.github/workflows/job-auto-labeler.yml b/.github/workflows/job-auto-labeler.yml
index 6ce925f..e14009a 100644
--- a/.github/workflows/job-auto-labeler.yml
+++ b/.github/workflows/job-auto-labeler.yml
@@ -7,7 +7,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
       - name: Run auto-labeler
         id: auto-labeler
         uses: mauroalderete/action-assign-labels@671a4ca2da0f900464c58b8b5540a1e07133e915 # v1
diff --git a/.github/workflows/job-check-helm-chart-docs.yml b/.github/workflows/job-check-helm-chart-docs.yml
index 69805b4..e3b8c13 100644
--- a/.github/workflows/job-check-helm-chart-docs.yml
+++ b/.github/workflows/job-check-helm-chart-docs.yml
@@ -22,7 +22,7 @@ jobs:
   docs:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
       - name: Run helm-docs
         uses: losisin/helm-docs-github-action@3a4528e97c49a5e83de6b78c50c61c8ee5c9f944 # v2
         with:
diff --git a/.github/workflows/job-create-version.yml b/.github/workflows/job-create-version.yml
index 2904d51..fb5dcb4 100644
--- a/.github/workflows/job-create-version.yml
+++ b/.github/workflows/job-create-version.yml
@@ -25,7 +25,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Set up repository
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
         with:
           fetch-depth: 0
           ref: ${{ github.head_ref || github.ref }}
diff --git a/.github/workflows/job-golang-lint.yml b/.github/workflows/job-golang-lint.yml
index 4d9abd8..00f43f7 100644
--- a/.github/workflows/job-golang-lint.yml
+++ b/.github/workflows/job-golang-lint.yml
@@ -13,7 +13,7 @@ jobs:
     env:
       GOSUMDB: off
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
       - uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6
         with:
           go-version-file: 'go.mod'
diff --git a/.github/workflows/job-license-metadata.yml b/.github/workflows/job-license-metadata.yml
index df32aa2..7a20c8b 100644
--- a/.github/workflows/job-license-metadata.yml
+++ b/.github/workflows/job-license-metadata.yml
@@ -20,7 +20,7 @@ jobs:
       - name: Login Gitub CLI
         run: |
           gh auth login --with-token <<< "${{ secrets.GITHUB_TOKEN }}"
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
         with:
           path: repo
           fetch-depth: 0  # Fetch all history for git diff
diff --git a/.github/workflows/job-node-publish.yml b/.github/workflows/job-node-publish.yml
index 6eaf155..33214fa 100644
--- a/.github/workflows/job-node-publish.yml
+++ b/.github/workflows/job-node-publish.yml
@@ -60,7 +60,7 @@ jobs:
       with:
         app-id: "838464"
         private-key: ${{ secrets.OPENMFP_PUBLISHER_PRIVATE_KEY }}
-    - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
       with:
         token: ${{ steps.app-token.outputs.token }}
     - uses: actions/setup-node@249970729cb0ef3589644e2896645e5dc5ba9c38 # v6
diff --git a/.github/workflows/job-node-test.yml b/.github/workflows/job-node-test.yml
index dd4c02e..050878e 100644
--- a/.github/workflows/job-node-test.yml
+++ b/.github/workflows/job-node-test.yml
@@ -40,7 +40,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-    - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
     - uses: actions/setup-node@249970729cb0ef3589644e2896645e5dc5ba9c38 # v6
       with:
         node-version: ${{ inputs.node_version }}
diff --git a/.github/workflows/job-ocm.yml b/.github/workflows/job-ocm.yml
index 2094904..65d2e67 100644
--- a/.github/workflows/job-ocm.yml
+++ b/.github/workflows/job-ocm.yml
@@ -33,7 +33,7 @@ jobs:
               chmod +x /home/runner/.local/bin/yq
           fi
       - name: Check out the repo
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
       - name: setup OCM CLI
         run: |
           REPO=${repo:=open-component-model/ocm}
diff --git a/.github/workflows/job-push-tag.yml b/.github/workflows/job-push-tag.yml
index 96a4cf9..770c1fe 100644
--- a/.github/workflows/job-push-tag.yml
+++ b/.github/workflows/job-push-tag.yml
@@ -9,7 +9,7 @@ jobs:
   ghTag:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
       - name: Publish GH Tag
         uses: thejeff77/action-push-tag@f110b453ffb8c4d18880b7338f75e6725b731d81 # v1.0.0
         with:
diff --git a/.github/workflows/job-release-chart.yml b/.github/workflows/job-release-chart.yml
index 0e12fce..f7e52b9 100644
--- a/.github/workflows/job-release-chart.yml
+++ b/.github/workflows/job-release-chart.yml
@@ -43,7 +43,7 @@ jobs:
     runs-on: ubuntu-latest
     if: ${{ (github.head_ref || github.ref) == format('refs/heads/{0}',inputs.release_branch) }}
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
       - name: Setup yq@latest
         if: ${{ inputs.updateVersion }}
         run: |
diff --git a/.github/workflows/job-scan-kubernetes-vulnerability.yml b/.github/workflows/job-scan-kubernetes-vulnerability.yml
index a16769e..ff95154 100644
--- a/.github/workflows/job-scan-kubernetes-vulnerability.yml
+++ b/.github/workflows/job-scan-kubernetes-vulnerability.yml
@@ -12,7 +12,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/job-test-chart.yml b/.github/workflows/job-test-chart.yml
index 02faf18..7b7efae 100644
--- a/.github/workflows/job-test-chart.yml
+++ b/.github/workflows/job-test-chart.yml
@@ -32,7 +32,7 @@ jobs:
         username: ${{ github.actor }}
         password: ${{ secrets.github_token }}
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
         with:
           ref: ${{ inputs.branch }}
       - name: Unit Testing Chart
@@ -41,7 +41,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
         with:
           fetch-depth: 0
       - name: Set up Helm
diff --git a/.github/workflows/job-update-version-file.yml b/.github/workflows/job-update-version-file.yml
index 751be14..a24ee24 100644
--- a/.github/workflows/job-update-version-file.yml
+++ b/.github/workflows/job-update-version-file.yml
@@ -42,7 +42,7 @@ jobs:
           owner: ${{ github.repository_owner }}
           repositories: |
             versions
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
         with:
           token: ${{ steps.app-token.outputs.token }}
           repository: ${{ inputs.versionRepo }}
diff --git a/.github/workflows/pipeline-k8s-checks.yml b/.github/workflows/pipeline-k8s-checks.yml
index 2c68f17..d4eb981 100644
--- a/.github/workflows/pipeline-k8s-checks.yml
+++ b/.github/workflows/pipeline-k8s-checks.yml
@@ -41,7 +41,7 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
 
       - name: kube-score install
         uses: yokawasa/action-setup-kube-tools@b16d49b2c459d33cf9d4c300a220ef0bcdbc730a # v0.14.0
diff --git a/.github/workflows/promote-stack.yaml b/.github/workflows/promote-stack.yaml
index ec17602..85b7922 100644
--- a/.github/workflows/promote-stack.yaml
+++ b/.github/workflows/promote-stack.yaml
@@ -27,7 +27,7 @@ jobs:
           app-id: "838464"
           private-key: ${{ secrets.OPENMFP_PUBLISHER_PRIVATE_KEY }}
           owner: ${{ github.repository_owner }}
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
         with:
           repository: ${{ inputs.stackRepo }}
           ref: ${{ inputs.targetBranch }}