diff --git a/.github/workflows/aot-validation.yml b/.github/workflows/aot-validation.yml
index 1aeb420..407d21d 100644
--- a/.github/workflows/aot-validation.yml
+++ b/.github/workflows/aot-validation.yml
@@ -34,7 +34,7 @@ jobs:
         os: [ ubuntu-latest, windows-latest ]
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - name: Setup .NET
         uses: actions/setup-dotnet@v4
@@ -113,7 +113,7 @@ jobs:
     # larger number is still useful to see, but the ILC figure is the one that is gated.
     continue-on-error: true
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - name: Setup .NET
         uses: actions/setup-dotnet@v4
diff --git a/.github/workflows/ospo-compliance.yml b/.github/workflows/ospo-compliance.yml
index a3b7cc2..4d0540d 100644
--- a/.github/workflows/ospo-compliance.yml
+++ b/.github/workflows/ospo-compliance.yml
@@ -19,7 +19,7 @@ jobs:
     name: Dependency vulnerability audit
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - name: Setup .NET
         uses: actions/setup-dotnet@v4
@@ -51,7 +51,7 @@ jobs:
     name: Governance files present
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - name: Verify required governance files
         shell: bash
@@ -69,7 +69,7 @@ jobs:
     name: Generate SBOM
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - name: Setup .NET
         uses: actions/setup-dotnet@v4