diff --git a/.github/workflows/_build.yml b/.github/workflows/_build.yml
index cc1e50b..12a299a 100644
--- a/.github/workflows/_build.yml
+++ b/.github/workflows/_build.yml
@@ -18,7 +18,7 @@ jobs:
     outputs:
       packages: ${{ steps.get-package-names.outputs.packages }}
     steps:
-      - uses: actions/checkout@v7.0.0
+      - uses: actions/checkout@v7.0.1
         with:
           ref: ${{ inputs.ref }}
       - uses: nixbuild/nix-quick-install-action@v35
@@ -36,7 +36,7 @@ jobs:
       matrix:
         package: ${{ fromJson(needs.get-package-names.outputs.packages) }}
     steps:
-      - uses: actions/checkout@v7.0.0
+      - uses: actions/checkout@v7.0.1
         with:
           ref: ${{ inputs.ref }}
       - uses: nixbuild/nix-quick-install-action@v35
@@ -54,7 +54,7 @@ jobs:
     needs: build-package
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v7.0.0
+      - uses: actions/checkout@v7.0.1
         with:
           ref: ${{ inputs.ref }}
           sparse-checkout: |
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index eb4213c..4a343a2 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -16,7 +16,7 @@ jobs:
     name: flake checks
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v7.0.0
+      - uses: actions/checkout@v7.0.1
       - uses: nixbuild/nix-quick-install-action@v35
       - name: Run nix flake check
         run: nix flake check --print-build-logs
diff --git a/.github/workflows/flake-update.yml b/.github/workflows/flake-update.yml
index eb4ea98..9bdcd2e 100644
--- a/.github/workflows/flake-update.yml
+++ b/.github/workflows/flake-update.yml
@@ -13,7 +13,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v7.0.0
+        uses: actions/checkout@v7.0.1
         with:
           persist-credentials: false
       - name: Install Nix
diff --git a/.github/workflows/post-release.yml b/.github/workflows/post-release.yml
index bf896b3..3384017 100644
--- a/.github/workflows/post-release.yml
+++ b/.github/workflows/post-release.yml
@@ -28,7 +28,7 @@ jobs:
         run: echo "version=${GITHUB_HEAD_REF#release/v}" >> "$GITHUB_OUTPUT"
 
       - name: Checkout repository
-        uses: actions/checkout@v7.0.0
+        uses: actions/checkout@v7.0.1
         with:
           fetch-depth: 0
 
@@ -54,7 +54,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v7.0.0
+        uses: actions/checkout@v7.0.1
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 9e265d1..858374f 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -21,7 +21,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v7.0.0
+        uses: actions/checkout@v7.0.1
         with:
           fetch-depth: 0
           token: ${{ secrets.GH_TOKEN }}