diff --git a/.github/workflows/scorecards-analysis.yml b/.github/workflows/scorecards-analysis.yml
index 0505c0e3..01d10849 100644
--- a/.github/workflows/scorecards-analysis.yml
+++ b/.github/workflows/scorecards-analysis.yml
@@ -22,7 +22,7 @@ jobs:
 
     steps:
       - name: "Checkout code"
-        uses: actions/checkout@2d1c1198e79c30cca5c3957b1e3b65ce95b5356e
+        uses: actions/checkout@bf085276cecdb0cc76fbbe0687a5a0e786646936
         with:
           persist-credentials: false
 
diff --git a/.github/workflows/typecheck.yaml b/.github/workflows/typecheck.yaml
index ec5cfe55..dbff02f6 100644
--- a/.github/workflows/typecheck.yaml
+++ b/.github/workflows/typecheck.yaml
@@ -12,7 +12,7 @@ jobs:
                github.com:443
                registry.yarnpkg.com:443
 
-         - uses: actions/checkout@2d1c1198e79c30cca5c3957b1e3b65ce95b5356e
+         - uses: actions/checkout@bf085276cecdb0cc76fbbe0687a5a0e786646936
          - name: Setup Node.js environment
            uses: actions/setup-node@9ced9a43a244f3ac94f13bfd896db8c8f30da67a
          - run: yarn --frozen