diff --git a/.github/workflows/apollo-studio-checks.yml b/.github/workflows/apollo-studio-checks.yml
index a8268101..a014d8ff 100644
--- a/.github/workflows/apollo-studio-checks.yml
+++ b/.github/workflows/apollo-studio-checks.yml
@@ -20,7 +20,7 @@ jobs:
       APOLLO_VCS_REMOTE_URL: ${{ github.event.pull_request.head.repo.clone_url }}
       APOLLO_VCS_BRANCH: ${{ github.event.pull_request.head.label }}
     steps:
-      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
         with:
           ref: ${{ github.event.pull_request.head.sha }}
 
diff --git a/.github/workflows/apollo-studio-publish.yml b/.github/workflows/apollo-studio-publish.yml
index 8bb9db85..f8811ad8 100644
--- a/.github/workflows/apollo-studio-publish.yml
+++ b/.github/workflows/apollo-studio-publish.yml
@@ -11,7 +11,7 @@ jobs:
       APOLLO_KEY: ${{ secrets.APOLLO_KEY }}
       APOLLO_VCS_COMMIT: ${{ github.event.pull_request.head.sha }}
     steps:
-      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
 
       - name: Install Rover
         run: |
diff --git a/.github/workflows/conventional-pr.yaml b/.github/workflows/conventional-pr.yaml
index 7191e02a..daf5732b 100644
--- a/.github/workflows/conventional-pr.yaml
+++ b/.github/workflows/conventional-pr.yaml
@@ -15,7 +15,7 @@ jobs:
     permissions:
       pull-requests: write
     steps:
-      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
       - uses: CondeNast/conventional-pull-request-action@3ce30fdb4d2beef8b941f23a1114dd8188eba082 # v0.2.0
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/image-main-latest.yml b/.github/workflows/image-main-latest.yml
index 8bdaa846..1f78a13f 100644
--- a/.github/workflows/image-main-latest.yml
+++ b/.github/workflows/image-main-latest.yml
@@ -14,7 +14,7 @@ jobs:
       - name: Log in to GHCR
         run: echo "${{ secrets.GITHUB_TOKEN }}" | docker login ghcr.io -u $ --password-stdin
 
-      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/lint-go.yml b/.github/workflows/lint-go.yml
index 49d3f1c9..d128e3f1 100644
--- a/.github/workflows/lint-go.yml
+++ b/.github/workflows/lint-go.yml
@@ -29,7 +29,7 @@ jobs:
         ports:
           - 5432:5432
     steps:
-      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
       - uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5
         with:
           go-version-file: "go.mod"
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 5a117025..f698ddc2 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -8,7 +8,7 @@ jobs:
   helm:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
 
       - name: Publish Helm charts
         uses: stefanprodan/helm-gh-pages@master
@@ -30,7 +30,7 @@ jobs:
       - name: Log in to GHCR
         run: echo "${{ secrets.GITHUB_TOKEN }}" | docker login ghcr.io -u $ --password-stdin
 
-      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/renovate-generate.yml b/.github/workflows/renovate-generate.yml
index 857d102c..97b2d5b7 100644
--- a/.github/workflows/renovate-generate.yml
+++ b/.github/workflows/renovate-generate.yml
@@ -21,7 +21,7 @@ jobs:
 
       - name: Checkout code
         if: steps.check_renovate.outputs.is_renovate == 'true'
-        uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
         with:
           repository: ${{ github.event.pull_request.head.repo.full_name }}
           ref: ${{ github.event.pull_request.head.ref }}
diff --git a/.github/workflows/test-go.yml b/.github/workflows/test-go.yml
index cf80a640..48cafac5 100644
--- a/.github/workflows/test-go.yml
+++ b/.github/workflows/test-go.yml
@@ -26,7 +26,7 @@ jobs:
 
     steps:
       - name: Checkout code for ${{ matrix.ci-database }}
-        uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
       - name: Set up Go for ${{ matrix.ci-database }}
         uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5
         with: