diff --git a/.github/workflows/fossa.yaml b/.github/workflows/fossa.yaml
index 01f3c67..3da3e0d 100644
--- a/.github/workflows/fossa.yaml
+++ b/.github/workflows/fossa.yaml
@@ -11,7 +11,7 @@ jobs:
     if: github.repository_owner == 'uber-go'
     steps:
       - name: Checkout code
-        uses: actions/checkout@v2
+        uses: actions/checkout@v4
 
       - name: FOSSA analysis
         uses: fossas/fossa-action@v1
diff --git a/.github/workflows/go.yml b/.github/workflows/go.yml
index 02cc088..9226686 100644
--- a/.github/workflows/go.yml
+++ b/.github/workflows/go.yml
@@ -28,7 +28,7 @@ jobs:
         go-version: ${{ matrix.go }}
 
     - name: Checkout code
-      uses: actions/checkout@1e31de5234b9f8995739874a8ce0492dc87873e2 # v4.0.0
+      uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0
 
     - name: Load cached dependencies
       uses: actions/cache@704facf57e6136b1bc63b828d79edcd491f0ee84 # v.3.3.2