diff --git a/.github/workflows/_reusable_cdk_synth.yml b/.github/workflows/_reusable_cdk_synth.yml
index 391147b..956188e 100644
--- a/.github/workflows/_reusable_cdk_synth.yml
+++ b/.github/workflows/_reusable_cdk_synth.yml
@@ -7,7 +7,7 @@ jobs:
   cdk-synth:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
         with:
           persist-credentials: false
 
diff --git a/.github/workflows/_reusable_check.yml b/.github/workflows/_reusable_check.yml
index 7c15384..5c601ef 100644
--- a/.github/workflows/_reusable_check.yml
+++ b/.github/workflows/_reusable_check.yml
@@ -7,7 +7,7 @@ jobs:
   check:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
         with:
           persist-credentials: false
 
diff --git a/.github/workflows/_reusable_deploy.yml b/.github/workflows/_reusable_deploy.yml
index e6fee5b..94d2c64 100644
--- a/.github/workflows/_reusable_deploy.yml
+++ b/.github/workflows/_reusable_deploy.yml
@@ -15,7 +15,7 @@ jobs:
       id-token: write
       contents: read
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
         with:
           persist-credentials: false
 
diff --git a/.github/workflows/_reusable_lambda_rie_test.yml b/.github/workflows/_reusable_lambda_rie_test.yml
index f20df30..9e12488 100644
--- a/.github/workflows/_reusable_lambda_rie_test.yml
+++ b/.github/workflows/_reusable_lambda_rie_test.yml
@@ -7,7 +7,7 @@ jobs:
   lambda-rie-test:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
         with:
           persist-credentials: false