diff --git a/.github/workflows/actions.yml b/.github/workflows/actions.yml
index 1972457..0cb569e 100644
--- a/.github/workflows/actions.yml
+++ b/.github/workflows/actions.yml
@@ -14,6 +14,6 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: linkerd/dev/actions/setup-tools@v36
-      - uses: actions/checkout@93ea575cb5d8a053eaa0ac8fa3b40d7e05a33cc8
+      - uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c
       - run: just-dev lint-actions
       - run: just-dev check-action-images
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 409caf9..ebf94e4 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -34,7 +34,7 @@ jobs:
       # XXX dev:v36-rust container doesn't include libjq
       - run: apt update && apt install -y --no-install-recommends jq
 
-      - uses: actions/checkout@93ea575cb5d8a053eaa0ac8fa3b40d7e05a33cc8
+      - uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c
       - run: just fetch
 
       - if: steps.meta.outputs.version
diff --git a/.github/workflows/rust.yml b/.github/workflows/rust.yml
index b15d0a9..cc70ba8 100644
--- a/.github/workflows/rust.yml
+++ b/.github/workflows/rust.yml
@@ -16,7 +16,7 @@ jobs:
     runs-on: ubuntu-latest
     container: ghcr.io/linkerd/dev:v36-rust
     steps:
-      - uses: actions/checkout@93ea575cb5d8a053eaa0ac8fa3b40d7e05a33cc8
+      - uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c
       - run: just fetch
       - run: just clippy
 
@@ -27,7 +27,7 @@ jobs:
     steps:
       # XXX dev:v36-rust container doesn't include libjq
       - run: apt update && apt install -y --no-install-recommends jq
-      - uses: actions/checkout@93ea575cb5d8a053eaa0ac8fa3b40d7e05a33cc8
+      - uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c
       - run: just fetch
       - run: just build
       - run: |