diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 0ce1227..faa6902 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -16,7 +16,7 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - name: Checkout
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
 
       - name: Verify current GPL and commercial-license boundaries
         run: python3 scripts/verify-current-license.py
@@ -57,7 +57,7 @@ jobs:
       ARIEC61850_ROOT: ${{ github.workspace }}\ARIEC61850
     steps:
       - name: Checkout ARSVIN into paired workspace
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
         with:
           path: arsvin
 
@@ -71,7 +71,7 @@ jobs:
           "commit=$($pin.Commit)" | Add-Content $env:GITHUB_OUTPUT
 
       - name: Checkout pinned sibling ARIEC61850
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
         with:
           repository: ${{ steps.engine_pin.outputs.repository }}
           ref: ${{ steps.engine_pin.outputs.commit }}
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 5c2749b..ba3b2e0 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -23,7 +23,7 @@ jobs:
       ARIEC61850_ROOT: ${{ github.workspace }}\ARIEC61850
     steps:
       - name: Checkout ARSVIN into paired workspace
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
         with:
           path: arsvin
 
@@ -36,7 +36,7 @@ jobs:
           "commit=$($pin.Commit)" | Add-Content $env:GITHUB_OUTPUT
 
       - name: Checkout pinned sibling ARIEC61850
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
         with:
           repository: ${{ steps.engine_pin.outputs.repository }}
           ref: ${{ steps.engine_pin.outputs.commit }}
diff --git a/.github/workflows/pages.yml b/.github/workflows/pages.yml
index aa94f13..c1144fa 100644
--- a/.github/workflows/pages.yml
+++ b/.github/workflows/pages.yml
@@ -50,7 +50,7 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - name: Checkout
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
 
       - name: Verify current GPL and commercial-license boundaries
         run: python3 scripts/verify-current-license.py
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 8bc7cb4..a22a406 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -50,7 +50,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
         with:
           fetch-depth: 0