diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 7e9daa93..271cc45e 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -16,7 +16,7 @@ jobs:
       contents: write
 
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v7
     - uses: actions/setup-java@v5
       with:
         distribution: 'temurin'
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index d9daf9ae..45459b1b 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -19,7 +19,7 @@ jobs:
       # Output logs to file in case we need to inspect errors.
       GITSIGN_LOG: "/tmp/gitsign.log"
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           token: ${{ secrets.RHACS_BOT_GITHUB_TOKEN }}
       - uses: chainguard-dev/actions/setup-gitsign@main
diff --git a/.github/workflows/tests.yaml b/.github/workflows/tests.yaml
index caaf17bb..1459de4e 100644
--- a/.github/workflows/tests.yaml
+++ b/.github/workflows/tests.yaml
@@ -14,7 +14,7 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: actions/setup-java@v5
         with:
           distribution: 'temurin'
@@ -41,7 +41,7 @@ jobs:
         run: cd stackrox-container-image-scanner && ./mvnw hpi:run -Djetty.port=8080 &
       - name: Create k8s Kind Cluster
         uses: helm/kind-action@v1
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           repository: stackrox/stackrox
           path: stackrox