diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index b52feb2..53ae50f 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -16,7 +16,7 @@ jobs:
       go: ${{ steps.filter.outputs.go }}
     steps:
     - name: Checkout
-      uses: actions/checkout@v2
+      uses: actions/checkout@v3.1.0
 
     - uses: dorny/paths-filter@v2
       id: filter
@@ -35,7 +35,7 @@ jobs:
     needs: [changes]
     if: ${{ needs.changes.outputs.docker == 'true' }}
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3.1.0
       - name: Lint Dockerfile
         uses: brpaz/hadolint-action@master
         with:
@@ -47,7 +47,7 @@ jobs:
     needs: [changes]
     if: ${{ needs.changes.outputs.go == 'true' }}
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3.1.0
       - name: golangci-lint
         uses: golangci/golangci-lint-action@v2
         with:
@@ -60,7 +60,7 @@ jobs:
     if: ${{ needs.changes.outputs.go == 'true' }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3.1.0
         with:
           # We must fetch at least the immediate parents so that if this is
           # a pull request then we can checkout the head.
@@ -106,7 +106,7 @@ jobs:
 
     steps:
       - name: Checkout 
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3.1.0
 
       - name: Install Go
         uses: actions/setup-go@v2
@@ -148,7 +148,7 @@ jobs:
     needs: [test, lint-docker, lint-go, lint-go-security]
     if: ${{ github.event_name == 'release' }}
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3.1.0
 
       - name: Login to docker.pkg.github.com
         run: |
diff --git a/.github/workflows/release-it.yml b/.github/workflows/release-it.yml
index 63ab4e0..9c1b301 100644
--- a/.github/workflows/release-it.yml
+++ b/.github/workflows/release-it.yml
@@ -21,7 +21,7 @@ jobs:
     runs-on: ubuntu-20.04
     steps:
     - name: Checkout
-      uses: actions/checkout@v2
+      uses: actions/checkout@v3.1.0
 
     - name: Fetch tags and configure git
       run: |