diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index 4bed683..e601d20 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -9,7 +9,7 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4.1.1
+      - uses: actions/checkout@v4.1.7
         with:
           # required by release-tag.sh to correctly identify files changed in the last commit
           fetch-depth: 2
diff --git a/.github/workflows/upload_release.yaml b/.github/workflows/upload_release.yaml
index 1dc5d0d..02afd4e 100644
--- a/.github/workflows/upload_release.yaml
+++ b/.github/workflows/upload_release.yaml
@@ -9,7 +9,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4.1.1
+        uses: actions/checkout@v4.1.7
       - name: Grab tag name
         uses: olegtarasov/get-tag@v2.1.3
         id: tagName
@@ -32,7 +32,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4.1.1
+        uses: actions/checkout@v4.1.7
       - name: Setup Java
         uses: actions/setup-java@v4.0.0
         with: