diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 6a1252b9f1..96c148ae51 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -51,7 +51,7 @@ jobs:
         uses: actions/setup-go@bfd2fb341f32be7281829126376a12a780ca79fc
         with:
           go-version: 1.19.1
-      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
+      - uses: actions/checkout@aadec899646c8e0f34c52d9219c2faac36626b55
       # see: https://golangci-lint.run/usage/configuration/#config-file
       - name: golangci-lint
         uses: golangci/golangci-lint-action@52b846a8b50e8281c7fd213aa6ceb1c6f333ba2d
diff --git a/.github/workflows/changelog_pr.yaml b/.github/workflows/changelog_pr.yaml
index 1b068aef6e..cfab3af99d 100644
--- a/.github/workflows/changelog_pr.yaml
+++ b/.github/workflows/changelog_pr.yaml
@@ -20,7 +20,7 @@ jobs:
         with:
           egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
 
-      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
+      - uses: actions/checkout@aadec899646c8e0f34c52d9219c2faac36626b55
         with:
           fetch-depth: 0
       - uses: heinrichreimer/github-changelog-generator-action@e60b5a2bd9fcd88dadf6345ff8327863fb8b490f
diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index 7afb0723c3..1886e6b23a 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -51,7 +51,7 @@ jobs:
         egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
 
     - name: Checkout repository
-      uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
+      uses: actions/checkout@aadec899646c8e0f34c52d9219c2faac36626b55
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
diff --git a/.github/workflows/curldemo.yaml b/.github/workflows/curldemo.yaml
index 034115a210..c5f95661c3 100644
--- a/.github/workflows/curldemo.yaml
+++ b/.github/workflows/curldemo.yaml
@@ -21,7 +21,7 @@ jobs:
         with:
           egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
 
-      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
+      - uses: actions/checkout@aadec899646c8e0f34c52d9219c2faac36626b55
         with:
           fetch-depth: 1
       - name: Login to Dockerhub
diff --git a/.github/workflows/fossa.yml b/.github/workflows/fossa.yml
index 7ebd6ef927..cfc5063e56 100644
--- a/.github/workflows/fossa.yml
+++ b/.github/workflows/fossa.yml
@@ -29,7 +29,7 @@ jobs:
           egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
 
       - name: Checkout code
-        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
+        uses: actions/checkout@aadec899646c8e0f34c52d9219c2faac36626b55
 
       - name: Run FOSSA scan and upload build data
         uses: fossa-contrib/fossa-action@19c6b8e02139dc32ebb00d3327625fb6dccbc424
diff --git a/.github/workflows/gh-pages.yaml b/.github/workflows/gh-pages.yaml
index aed0532ca2..d1ee909f2c 100644
--- a/.github/workflows/gh-pages.yaml
+++ b/.github/workflows/gh-pages.yaml
@@ -21,7 +21,7 @@ jobs:
         with:
           egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
 
-      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
+      - uses: actions/checkout@aadec899646c8e0f34c52d9219c2faac36626b55
         with:
           fetch-depth: 0
       - name: Copy new docs to gh-pages
diff --git a/.github/workflows/helm_check-values-schema.yaml b/.github/workflows/helm_check-values-schema.yaml
index cfd2e7dc98..2a53c9e562 100644
--- a/.github/workflows/helm_check-values-schema.yaml
+++ b/.github/workflows/helm_check-values-schema.yaml
@@ -22,7 +22,7 @@ jobs:
           egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
 
       - name: 'Checkout'
-        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
+        uses: actions/checkout@aadec899646c8e0f34c52d9219c2faac36626b55
       - name: 'Check if values.schema.json was updated'
         run: |
           VALUES_FILE=chart/k8gb/values.yaml
diff --git a/.github/workflows/helm_docs.yaml b/.github/workflows/helm_docs.yaml
index c5c037c3fd..5021e2907a 100644
--- a/.github/workflows/helm_docs.yaml
+++ b/.github/workflows/helm_docs.yaml
@@ -22,7 +22,7 @@ jobs:
         egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
 
     - name: Checkout Code
-      uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
+      uses: actions/checkout@aadec899646c8e0f34c52d9219c2faac36626b55
     - name: Generate docs for helm chart - chart/k8gb/README.md
       uses: docker://jnorwood/helm-docs@sha256:29fb3ec3ca32355d504e8655961b69acb2b1bf9e741d82b932f9468cf4cadd4e
       with:
diff --git a/.github/workflows/helm_publish.yaml b/.github/workflows/helm_publish.yaml
index dec7c75da3..9324692da5 100644
--- a/.github/workflows/helm_publish.yaml
+++ b/.github/workflows/helm_publish.yaml
@@ -16,7 +16,7 @@ jobs:
         with:
           egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
 
-      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
+      - uses: actions/checkout@aadec899646c8e0f34c52d9219c2faac36626b55
         with:
           fetch-depth: 0
       - uses: dave-mcconnell/helm-gh-pages-microservices@8478af5f0fd712cc0fb59f2c99e0688f3f591287
diff --git a/.github/workflows/kube-linter.yaml b/.github/workflows/kube-linter.yaml
index a5a55d43af..8dabc1fa87 100644
--- a/.github/workflows/kube-linter.yaml
+++ b/.github/workflows/kube-linter.yaml
@@ -21,7 +21,7 @@ jobs:
         with:
           egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
 
-      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
+      - uses: actions/checkout@aadec899646c8e0f34c52d9219c2faac36626b55
 
       - name: Create ../results directory for sarif files
         shell: bash
diff --git a/.github/workflows/olm_pr.yaml b/.github/workflows/olm_pr.yaml
index c31f576816..d5ebfd2cef 100644
--- a/.github/workflows/olm_pr.yaml
+++ b/.github/workflows/olm_pr.yaml
@@ -32,7 +32,7 @@ jobs:
         with:
           egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
 
-      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
+      - uses: actions/checkout@aadec899646c8e0f34c52d9219c2faac36626b55
         with:
           fetch-depth: 0
 
@@ -60,7 +60,7 @@ jobs:
           rm ./olm/bundle/Dockerfile
           cp -r ./olm/bundle $GITHUB_WORKSPACE/
 
-      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
+      - uses: actions/checkout@aadec899646c8e0f34c52d9219c2faac36626b55
         with:
           repository: ${{ github.event.inputs.upstreamRepo }}
           path: sandbox
diff --git a/.github/workflows/terrascan.yaml b/.github/workflows/terrascan.yaml
index 35ba987c2e..14e40de52f 100644
--- a/.github/workflows/terrascan.yaml
+++ b/.github/workflows/terrascan.yaml
@@ -23,7 +23,7 @@ jobs:
         egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
 
     - name: Checkout repository
-      uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
+      uses: actions/checkout@aadec899646c8e0f34c52d9219c2faac36626b55
     - name: Run Terrascan
       id: terrascan
       uses: accurics/terrascan-action@a4b0f7ec5fb3c4c66b8e76d824d958002f6ce12c
diff --git a/.github/workflows/terratest-more-clusters.yaml b/.github/workflows/terratest-more-clusters.yaml
index e9365887c4..908dcb3fa4 100644
--- a/.github/workflows/terratest-more-clusters.yaml
+++ b/.github/workflows/terratest-more-clusters.yaml
@@ -13,7 +13,7 @@ jobs:
     runs-on: ubuntu-22.04
     if: ${{ github.event.label.name == 'heavy-tests' }}
     steps:
-      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
+      - uses: actions/checkout@aadec899646c8e0f34c52d9219c2faac36626b55
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/terratest.yaml b/.github/workflows/terratest.yaml
index 08bf050dec..2e3f4eddca 100644
--- a/.github/workflows/terratest.yaml
+++ b/.github/workflows/terratest.yaml
@@ -44,7 +44,7 @@ jobs:
     needs: skip-check
     if: ${{ needs.skip-check.outputs.should_skip != 'true' }} && !contains( github.event.pull_request.labels.*.name, 'renovate')
     steps:
-      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
+      - uses: actions/checkout@aadec899646c8e0f34c52d9219c2faac36626b55
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/upgrade-testing.yaml b/.github/workflows/upgrade-testing.yaml
index 9c8be50550..90246d4880 100644
--- a/.github/workflows/upgrade-testing.yaml
+++ b/.github/workflows/upgrade-testing.yaml
@@ -44,7 +44,7 @@ jobs:
     needs: skip-check
     if: ${{ needs.skip-check.outputs.should_skip != 'true' }} && !contains( github.event.pull_request.labels.*.name, 'renovate')
     steps:
-      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
+      - uses: actions/checkout@aadec899646c8e0f34c52d9219c2faac36626b55
         with:
           fetch-depth: 0