diff --git a/.github/workflows/tag-generators.yml b/.github/workflows/tag-generators.yml
index 9755e47ab..8950dfa9d 100644
--- a/.github/workflows/tag-generators.yml
+++ b/.github/workflows/tag-generators.yml
@@ -24,7 +24,7 @@ jobs:
     steps:
       - name: Checkout repo
         # zizmor: ignore[artipacked] - checkout v6 persists credentials safely in RUNNER_TEMP
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           token: ${{ secrets.YOSHI_CODE_BOT_TOKEN }}
       - name: Install Ruby 3.4