diff --git a/.github/workflows/commitlint.yaml b/.github/workflows/commitlint.yaml
index fd8924140..5d0d7a7b7 100644
--- a/.github/workflows/commitlint.yaml
+++ b/.github/workflows/commitlint.yaml
@@ -15,7 +15,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+        uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/compliance.yaml b/.github/workflows/compliance.yaml
index 74b8d54d3..eb4f6598c 100644
--- a/.github/workflows/compliance.yaml
+++ b/.github/workflows/compliance.yaml
@@ -30,7 +30,7 @@ jobs:
     steps:
       # Used to execute the uds run command
       - name: Checkout repository
-        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+        uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
 
       - name: Environment setup
         uses: ./.github/actions/setup
diff --git a/.github/workflows/docs-shim.yaml b/.github/workflows/docs-shim.yaml
index 2ae466cc6..f1e131434 100644
--- a/.github/workflows/docs-shim.yaml
+++ b/.github/workflows/docs-shim.yaml
@@ -23,7 +23,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+        uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
       - name: lint-check
         uses: ./.github/actions/lint-check
 
diff --git a/.github/workflows/lint-oscal.yaml b/.github/workflows/lint-oscal.yaml
index 4f1501e1b..33dab2e60 100644
--- a/.github/workflows/lint-oscal.yaml
+++ b/.github/workflows/lint-oscal.yaml
@@ -6,6 +6,7 @@ on:
     types: [milestoned, opened, reopened, synchronize]
     paths:
       - '**/*oscal*.yaml'
+      - '!.github/workflows/lint-oscal.yaml'
 
 permissions:
   contents: read
@@ -20,7 +21,7 @@ jobs:
       oscal_files: ${{ steps.path-filter.outputs.oscal_files }}
     steps:
       - name: Checkout the code
-        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+        uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
 
       # Uses a custom action to filter paths for source packages.
       - name: Check src paths
@@ -47,7 +48,7 @@ jobs:
         shell: bash
       # checkout for access to the oscal files targeted for linting
       - name: Checkout the code
-        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+        uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
       - name: Environment setup
         uses: ./.github/actions/setup
       # lint the oscal files
diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml
index bfb1d49dd..6ed33ecbe 100644
--- a/.github/workflows/publish.yaml
+++ b/.github/workflows/publish.yaml
@@ -23,7 +23,7 @@ jobs:
       id-token: write  # This is needed for OIDC federation.
 
     steps:
-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+      - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
 
       - name: Environment setup
         uses: ./.github/actions/setup
diff --git a/.github/workflows/pull-request-conditionals.yaml b/.github/workflows/pull-request-conditionals.yaml
index cc0a879d4..c5ccf2adf 100644
--- a/.github/workflows/pull-request-conditionals.yaml
+++ b/.github/workflows/pull-request-conditionals.yaml
@@ -42,7 +42,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+        uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
       - name: lint-check
         uses: ./.github/actions/lint-check
 
@@ -56,7 +56,7 @@ jobs:
 
     steps:
       - name: Checkout the code
-        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+        uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
 
       # Uses a custom action to filter paths for source packages.
       - name: Check src paths
diff --git a/.github/workflows/slim-dev-test.yaml b/.github/workflows/slim-dev-test.yaml
index 89c72e8c6..a3b09ee32 100644
--- a/.github/workflows/slim-dev-test.yaml
+++ b/.github/workflows/slim-dev-test.yaml
@@ -42,7 +42,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout the code
-        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+        uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
       - name: Environment setup
         uses: ./.github/actions/setup
       - name: Deploy Slim Dev Bundle
diff --git a/.github/workflows/snapshot-release.yaml b/.github/workflows/snapshot-release.yaml
index 5ea5da234..b1c188e67 100644
--- a/.github/workflows/snapshot-release.yaml
+++ b/.github/workflows/snapshot-release.yaml
@@ -24,7 +24,7 @@ jobs:
     permissions:
       contents: write
     steps:
-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+      - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
         with:
           fetch-tags: 'true'
       - name: Update snapshot-latest tag
diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml
index fca5ce590..a5ed0ce24 100644
--- a/.github/workflows/test.yaml
+++ b/.github/workflows/test.yaml
@@ -47,7 +47,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+        uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
 
       - name: Environment setup
         uses: ./.github/actions/setup