diff --git a/.github/workflows/broken-link-check.yaml b/.github/workflows/broken-link-check.yaml
index 0b492e69e..fc0c08acf 100644
--- a/.github/workflows/broken-link-check.yaml
+++ b/.github/workflows/broken-link-check.yaml
@@ -19,7 +19,7 @@ jobs:
           private_key: "${{ secrets.BOT_APP_PRIVATE_KEY }}"
 
       - name: Checkout
-        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
+        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
         with:
           token: "${{ steps.generate-token.outputs.token }}"
 
diff --git a/.github/workflows/helmrelease-diff.yaml b/.github/workflows/helmrelease-diff.yaml
index e8ee0ee12..cc1dd7fe1 100644
--- a/.github/workflows/helmrelease-diff.yaml
+++ b/.github/workflows/helmrelease-diff.yaml
@@ -25,7 +25,7 @@ jobs:
           private_key: "${{ secrets.BOT_APP_PRIVATE_KEY }}"
 
       - name: Checkout
-        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
+        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
         with:
           token: "${{ steps.generate-token.outputs.token }}"
 
@@ -55,12 +55,12 @@ jobs:
           private_key: "${{ secrets.BOT_APP_PRIVATE_KEY }}"
 
       - name: Checkout
-        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
+        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
         with:
           token: "${{ steps.generate-token.outputs.token }}"
 
       - name: Checkout default branch
-        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
+        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
         with:
           token: "${{ steps.generate-token.outputs.token }}"
           ref: "${{ github.event.repository.default_branch }}"
diff --git a/.github/workflows/kubeconform.yaml b/.github/workflows/kubeconform.yaml
index 2c88141ef..24864d512 100644
--- a/.github/workflows/kubeconform.yaml
+++ b/.github/workflows/kubeconform.yaml
@@ -24,7 +24,7 @@ jobs:
           private_key: "${{ secrets.BOT_APP_PRIVATE_KEY }}"
 
       - name: Checkout
-        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
+        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
         with:
           token: "${{ steps.generate-token.outputs.token }}"
 
diff --git a/.github/workflows/meta-sync-labels.yaml b/.github/workflows/meta-sync-labels.yaml
index 06f075b3c..cd5846706 100644
--- a/.github/workflows/meta-sync-labels.yaml
+++ b/.github/workflows/meta-sync-labels.yaml
@@ -20,7 +20,7 @@ jobs:
           private_key: "${{ secrets.BOT_APP_PRIVATE_KEY }}"
 
       - name: Checkout
-        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
+        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
         with:
           token: "${{ steps.generate-token.outputs.token }}"
 
diff --git a/.github/workflows/renovate.yaml b/.github/workflows/renovate.yaml
index 045c6a3a8..0a069b6f0 100644
--- a/.github/workflows/renovate.yaml
+++ b/.github/workflows/renovate.yaml
@@ -30,7 +30,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
+        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
 
       - name: Generate Token
         uses: tibdex/github-app-token@b62528385c34dbc9f38e5f4225ac829252d1ea92 # v1.8.0