diff --git a/.github/workflows/release-please.yml b/.github/workflows/release-please.yml
index f44dc85..12025f6 100644
--- a/.github/workflows/release-please.yml
+++ b/.github/workflows/release-please.yml
@@ -19,7 +19,7 @@ jobs:
           release-type: simple
       
       # tag major and minor versions
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - name: tag major and minor versions
         if: ${{ steps.release.outputs.release_created }}
         run: |
diff --git a/action.yml b/action.yml
index 4d560bf..bfd0413 100644
--- a/action.yml
+++ b/action.yml
@@ -207,7 +207,7 @@ runs:
       uses: slsa-framework/slsa-verifier/actions/installer@ea584f4502babc6f60d9bc799dbbb13c1caa9ee6 # v2.7.1
 
     # clones user's repo
-    - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       if: ${{ inputs.skip_checkout == 'false' }}
       with:
         persist-credentials: false