diff --git a/.github/workflows/_shared-prepare-docker-cache.yaml b/.github/workflows/_shared-prepare-docker-cache.yaml
index 85af208..ac77e1d 100644
--- a/.github/workflows/_shared-prepare-docker-cache.yaml
+++ b/.github/workflows/_shared-prepare-docker-cache.yaml
@@ -28,7 +28,7 @@ jobs:
     - name: Cache Docker images.
       id: cache
       if: ${{ steps.check_cache.outputs.exists == 'false' }}
-      uses: actions/cache@9255dc7a253b0ccc959486e2bca901246202afeb # 5.0.1
+      uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # 5.0.3
       with:
         path: ./docker-cache
         key: kurtosis-docker-${{ runner.os }}-${{ inputs.kurtosis_version }}
diff --git a/.github/workflows/_shared-run-test.yaml b/.github/workflows/_shared-run-test.yaml
index d911209..969b3d1 100644
--- a/.github/workflows/_shared-run-test.yaml
+++ b/.github/workflows/_shared-run-test.yaml
@@ -110,7 +110,7 @@ jobs:
     timeout-minutes: 1440
     steps:
     - name: Checkout Repository
-      uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+      uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       
     - name: "Stagger job start"
       if: ${{ inputs.stagger_seconds != '0' && inputs.stagger_seconds != '' }}
@@ -570,14 +570,14 @@ jobs:
 
     - name: Upload dump artifact
       if: ${{ steps.enclave_dump.outputs.dump_dir != '' }}
-      uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
+      uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
       with:
         name: "enclave-dump-assertoor-${{ github.run_id }}-${{ inputs.id }}"
         path: "${{ steps.enclave_dump.outputs.dump_dir }}"
 
     - name: Upload Claude Code output artifact
       if: ${{ always() && steps.claude_code.outcome != 'skipped' }}
-      uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
+      uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
       with:
         name: "claude-code-output-${{ github.run_id }}-${{ inputs.id }}"
         path: |
@@ -759,7 +759,7 @@ jobs:
           exit 1 # fail action
         fi
     - name: Upload summary artifact
-      uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
+      uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
       if: ${{ always() }}
       with:
         name: "summary-${{ inputs.id }}"
diff --git a/.github/workflows/_shared-run.yaml b/.github/workflows/_shared-run.yaml
index add4881..a76812f 100644
--- a/.github/workflows/_shared-run.yaml
+++ b/.github/workflows/_shared-run.yaml
@@ -218,7 +218,7 @@ jobs:
     needs: [get_test, run_test]
     steps:
     - name: Checkout Repository
-      uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+      uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
     - name: Get summary artifacts
       id: "summary_ids"
       run: |
@@ -229,7 +229,7 @@ jobs:
       env:
         GH_TOKEN: ${{ github.token }}
     - name: Download summary artifacts
-      uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
+      uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0
       with:
         artifact-ids: ${{ steps.summary_ids.outputs.artifact_ids }}
         path: "./summaries"
diff --git a/.github/workflows/run-manual.yml b/.github/workflows/run-manual.yml
index bcd9f67..fa75076 100644
--- a/.github/workflows/run-manual.yml
+++ b/.github/workflows/run-manual.yml
@@ -41,7 +41,7 @@ jobs:
       kurtosis_versions: ${{ steps.tests.outputs.kurtosis_versions }}
     steps:
     - name: Checkout Repository
-      uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+      uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
     - name: "Load test configurations from tests.yaml"
       id: tests
       shell: bash
diff --git a/.github/workflows/run-scheduled.yml b/.github/workflows/run-scheduled.yml
index 1fcc648..f4abdcb 100644
--- a/.github/workflows/run-scheduled.yml
+++ b/.github/workflows/run-scheduled.yml
@@ -22,7 +22,7 @@ jobs:
       kurtosis_versions: ${{ steps.tests.outputs.kurtosis_versions }}
     steps:
     - name: Checkout Repository
-      uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+      uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
     - name: "Clean up stagger tags from previous runs"
       shell: bash
       env: