diff --git a/.github/workflows/error_handling_utils_tests.yml b/.github/workflows/error_handling_utils_tests.yml
index 7e15725..1fb45b1 100644
--- a/.github/workflows/error_handling_utils_tests.yml
+++ b/.github/workflows/error_handling_utils_tests.yml
@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Set up Python
         uses: actions/setup-python@v6
diff --git a/.github/workflows/my-vaccs-int-tests.yml b/.github/workflows/my-vaccs-int-tests.yml
index 09ddb7f..45d7fc7 100644
--- a/.github/workflows/my-vaccs-int-tests.yml
+++ b/.github/workflows/my-vaccs-int-tests.yml
@@ -43,7 +43,7 @@ jobs:
           echo "Workflow triggered by allowed repository: $CALLER_REPO"
 
       - name: Checkout main
-        uses: actions/checkout@v6.0.2
+        uses: actions/checkout@v6
         with:
           repository: NHSDigital/eligibility-signposting-api-regression-tests
           ref: main
diff --git a/.github/workflows/performance_tests.yml b/.github/workflows/performance_tests.yml
index 41ddb6e..41e9c44 100644
--- a/.github/workflows/performance_tests.yml
+++ b/.github/workflows/performance_tests.yml
@@ -52,7 +52,7 @@ jobs:
           echo "spawn_rate: ${spawn_rate}"
 
       - name: Checkout
-        uses: actions/checkout@0c366fd6a839edf440554fa01a7085ccba70ac98
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5
 
       # using git commit sha for version of action to ensure we have stable version
       - name: Install asdf
diff --git a/.github/workflows/quality-checks.yml b/.github/workflows/quality-checks.yml
index 62cf81a..f85a790 100644
--- a/.github/workflows/quality-checks.yml
+++ b/.github/workflows/quality-checks.yml
@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-22.04
     steps:
       - name: Checkout code
-        uses: actions/checkout@v6.0.2
+        uses: actions/checkout@v6
         with:
           ref: ${{ github.event.pull_request.head.sha || github.sha }}
           fetch-depth: 0
@@ -69,7 +69,7 @@ jobs:
             .git
 
       - name: SonarQube
-        uses: actions/checkout@v6.0.2
+        uses: actions/checkout@v6
         with:
           ref: ${{ github.event.pull_request.head.sha || github.sha }}
           fetch-depth: 0 # Shallow clones should be disabled for a better relevancy of analysis
diff --git a/.github/workflows/regression_tests.yml b/.github/workflows/regression_tests.yml
index e24f9bc..67dfd32 100644
--- a/.github/workflows/regression_tests.yml
+++ b/.github/workflows/regression_tests.yml
@@ -97,7 +97,7 @@ jobs:
           echo run identifier "$ID"-"$ENV"  >> "$GITHUB_STEP_SUMMARY"
 
       - name: Checkout
-        uses: actions/checkout@0c366fd6a839edf440554fa01a7085ccba70ac98
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5
         with:
           ref: ${{ inputs.github_tag }}
 
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 8f704f7..ddd7375 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -30,7 +30,7 @@ jobs:
       spec_version: ${{steps.output_version_tag.outputs.SPEC_VERSION}}
     steps:
       - name: Checkout code
-        uses: actions/checkout@v6.0.2
+        uses: actions/checkout@v6
         with:
           ref: ${{ env.BRANCH_NAME }}
           fetch-depth: 0