diff --git a/.github/workflows/community.yml b/.github/workflows/community.yml
index e1ba370bd..6f4d35870 100644
--- a/.github/workflows/community.yml
+++ b/.github/workflows/community.yml
@@ -49,7 +49,7 @@ jobs:
       PYTHONUNBUFFERED: 1
     steps:
       - name: Checkout
-        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+        uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
 
       - name: Set up Python
         uses: ./.github/actions/setup-python
diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml
index aab0a3925..d435f9d93 100644
--- a/.github/workflows/docker.yml
+++ b/.github/workflows/docker.yml
@@ -54,7 +54,7 @@ jobs:
     runs-on: ${{ inputs.runner }}
     steps:
       - name: Checkout
-        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+        uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
         with:
           # avoid auth conflict when cloning DTAS during verify step
           persist-credentials: false
diff --git a/.github/workflows/enteprise.yml b/.github/workflows/enteprise.yml
index 6e65ad289..f7ad0b406 100644
--- a/.github/workflows/enteprise.yml
+++ b/.github/workflows/enteprise.yml
@@ -70,7 +70,7 @@ jobs:
         run: echo "dtas_version=$DTAS_VERSION" >> $GITHUB_OUTPUT
 
       - name: Checkout
-        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+        uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
 
       - name: Setup Python
         uses: ./.github/actions/setup-python
@@ -176,7 +176,7 @@ jobs:
       MOLECULE_IT_AWS_VPC_SUBNET_ID: subnet-6bdd4223
     steps:
       - name: Checkout
-        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+        uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
         with:
           # avoid auth conflict when cloning DTAS during verify step
           persist-credentials: false
diff --git a/.github/workflows/enterprise-extended.yml b/.github/workflows/enterprise-extended.yml
index 609f3e5bb..eff3bc2b2 100644
--- a/.github/workflows/enterprise-extended.yml
+++ b/.github/workflows/enterprise-extended.yml
@@ -32,7 +32,7 @@ jobs:
       MOLECULE_IT_AWS_VPC_SUBNET_ID: subnet-6bdd4223
     steps:
       - name: Checkout
-        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+        uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
         with:
           # avoid auth conflict when cloning DTAS during verify step
           persist-credentials: false
diff --git a/.github/workflows/kics.yml b/.github/workflows/kics.yml
index eadbe7204..9ee5f794c 100644
--- a/.github/workflows/kics.yml
+++ b/.github/workflows/kics.yml
@@ -21,7 +21,7 @@ jobs:
   kics:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+      - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
       - name: Run KICS Scan
         uses: checkmarx/kics-github-action@530ac1f8efe6202b0f12c9a6e952597ae707b755 # v2.1.2
         with:
diff --git a/.github/workflows/precommit.yml b/.github/workflows/precommit.yml
index ae438a5bf..f3a30baec 100644
--- a/.github/workflows/precommit.yml
+++ b/.github/workflows/precommit.yml
@@ -11,7 +11,7 @@ jobs:
   pre-commit:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+      - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
         with:
           fetch-depth: 2
 
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index c2411689a..4ac9807cd 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -9,7 +9,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+        uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
 
       - name: Get tag name
         shell: bash
diff --git a/.github/workflows/updatecli.yml b/.github/workflows/updatecli.yml
index ed7c9fdc5..04dc4baa9 100644
--- a/.github/workflows/updatecli.yml
+++ b/.github/workflows/updatecli.yml
@@ -34,7 +34,7 @@ jobs:
           - updatecli_acs72.yml
           - updatecli_acs71.yml
     steps:
-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+      - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
         with:
           ref: ${{ github.head_ref || github.ref_name }}
           token: ${{ secrets.BOT_GITHUB_TOKEN }}