diff --git a/.github/workflows/cleanup.yml b/.github/workflows/cleanup.yml
index 3e09fd1a6..ff852ac39 100644
--- a/.github/workflows/cleanup.yml
+++ b/.github/workflows/cleanup.yml
@@ -17,7 +17,7 @@ jobs:
           echo "SUFFIX=pr-${{ github.event.number }}" >> $GITHUB_ENV
 
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3
 
       - name: Clean up api - dev (OCP4)
         shell: bash
@@ -49,7 +49,7 @@ jobs:
           echo "SUFFIX=pr-${{ github.event.number }}" >> $GITHUB_ENV
 
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3
 
       - name: Clean up dev database
         shell: bash
diff --git a/.github/workflows/deployment.yml b/.github/workflows/deployment.yml
index 16088148d..d850d6d1a 100644
--- a/.github/workflows/deployment.yml
+++ b/.github/workflows/deployment.yml
@@ -16,7 +16,7 @@ jobs:
           echo "SUFFIX=pr-${{ github.event.number }}" >> $GITHUB_ENV
 
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3
 
       - name: Deploy PostGIS instance
         shell: bash
@@ -35,7 +35,7 @@ jobs:
           echo "SUFFIX=pr-${{ github.event.number }}" >> $GITHUB_ENV
 
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3
 
       - name: Postgres Backup Cronjob
         shell: bash
@@ -65,7 +65,7 @@ jobs:
           echo "SUFFIX=pr-${{ github.event.number }}" >> $GITHUB_ENV
 
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3
 
       - name: Build Image
         shell: bash
@@ -84,7 +84,7 @@ jobs:
           echo "SUFFIX=pr-${{ github.event.number }}" >> $GITHUB_ENV
 
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3
 
       - name: Deploy to Dev
         shell: bash
@@ -149,7 +149,7 @@ jobs:
         run: echo "SUFFIX=pr-${{ github.event.number }}" >> $GITHUB_ENV
 
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3
 
       - name: Build Image
         shell: bash
@@ -172,7 +172,7 @@ jobs:
         run: echo "SUFFIX=pr-${{ github.event.number }}" >> $GITHUB_ENV
 
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3
 
       - name: C-Haines Cronjob
         shell: bash
@@ -190,7 +190,7 @@ jobs:
           echo "SUFFIX=pr-${{ github.event.number }}" >> $GITHUB_ENV
 
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3
 
       - name: Deploy PostGIS instance
         shell: bash
@@ -209,7 +209,7 @@ jobs:
           echo "SUFFIX=pr-${{ github.event.number }}" >> $GITHUB_ENV
 
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3
 
       - name: Deploy to Test
         shell: bash
diff --git a/.github/workflows/integration.yml b/.github/workflows/integration.yml
index ec571e2b5..17ca8e3c2 100644
--- a/.github/workflows/integration.yml
+++ b/.github/workflows/integration.yml
@@ -16,7 +16,7 @@ jobs:
       RENV_PATHS_ROOT: ~/.local/share/renv
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3
         with:
           # For sonar-scanner to work properly we can't use a shallow fetch.
           fetch-depth: 0
@@ -128,7 +128,7 @@ jobs:
         node-version: [14.x]
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3
         with:
           # For sonar-scanner to work properly we can't use a shallow fetch.
           fetch-depth: 0
@@ -176,7 +176,7 @@ jobs:
     steps:
       # we need to checkout, so that we have codecov.yml
       - name: Checkout repo
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3
       - name: Download all workflow run artifacts
         uses: actions/download-artifact@v2
       - name: Upload test coverage to Codecov
@@ -193,7 +193,7 @@ jobs:
         python-version: [3.6.15]
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3
         with:
           # For sonar-scanner to work properly we can't use a shallow fetch.
           fetch-depth: 0
diff --git a/.github/workflows/post_merge_integration.yml b/.github/workflows/post_merge_integration.yml
index 289cd5d8b..ec42bb73a 100644
--- a/.github/workflows/post_merge_integration.yml
+++ b/.github/workflows/post_merge_integration.yml
@@ -17,7 +17,7 @@ jobs:
       RENV_PATHS_ROOT: ~/.local/share/renv
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3
         with:
           # For sonar-scanner to work properly we can't use a shallow fetch.
           fetch-depth: 0
@@ -132,7 +132,7 @@ jobs:
         node-version: [14.x]
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3
         with:
           # For sonar-scanner to work properly we can't use a shallow fetch.
           fetch-depth: 0
@@ -180,7 +180,7 @@ jobs:
     steps:
       # we need to checkout, so that we have codecov.yml
       - name: Checkout repo
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3
       - name: Download all workflow run artifacts
         uses: actions/download-artifact@v2
       - name: Upload test coverage to Codecov
diff --git a/.github/workflows/pr_description.yml b/.github/workflows/pr_description.yml
index 04912dd29..18af5252c 100644
--- a/.github/workflows/pr_description.yml
+++ b/.github/workflows/pr_description.yml
@@ -10,7 +10,7 @@ jobs:
     name: Set pull request description
     runs-on: ubuntu-20.04
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
       - name: Set description
         uses: actions/github-script@v6
         with:
diff --git a/.github/workflows/production.yml b/.github/workflows/production.yml
index da42db343..9662da55a 100644
--- a/.github/workflows/production.yml
+++ b/.github/workflows/production.yml
@@ -25,7 +25,7 @@ jobs:
             // find an open PR (potentially problematic if you have multiple PR's on the same hash open!)
             const pr = pulls.data.find( ({state}) => state === 'open')
             core.exportVariable('SUFFIX', `pr-${pr.number}`);
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
       - name: Provision to production
         run: |
           echo Login
diff --git a/.github/workflows/renovate.yml b/.github/workflows/renovate.yml
index 92af49609..d830da875 100644
--- a/.github/workflows/renovate.yml
+++ b/.github/workflows/renovate.yml
@@ -10,7 +10,7 @@ jobs:
       LOG_LEVEL: debug
     steps:
       - name: Checkout
-        uses: actions/checkout@v2.4.0
+        uses: actions/checkout@v3.0.0
       - name: Self-hosted Renovate
         uses: renovatebot/github-action@v31.81.3
         with:
diff --git a/.github/workflows/zap_scan.yml b/.github/workflows/zap_scan.yml
index 6137df80b..d4d9a6d6f 100644
--- a/.github/workflows/zap_scan.yml
+++ b/.github/workflows/zap_scan.yml
@@ -10,7 +10,7 @@ jobs:
     name: Scan the web application in OCP4
     steps:
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3
         with:
           ref: main
       - name: ZAP Scan