diff --git a/.github/workflows/coverage.yaml b/.github/workflows/coverage.yaml
index bd3c03a..5d16bd0 100644
--- a/.github/workflows/coverage.yaml
+++ b/.github/workflows/coverage.yaml
@@ -17,7 +17,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v4.1.6
+      - uses: actions/checkout@v4.1.7
         with:
           persist-credentials: false
 
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 0a3bb8b..41c24c3 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -7,7 +7,7 @@ jobs:
     name: build on MSRV
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v4.1.6
+    - uses: actions/checkout@v4.1.7
     - uses: dtolnay/rust-toolchain@1.65.0
     # Don't use --all-features because `frost` has a higher MSRV and it's non-default.
     # Also don't run tests because some dev-dependencies have higher MSRVs.
@@ -16,7 +16,7 @@ jobs:
     name: test on nightly
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v4.1.6
+    - uses: actions/checkout@v4.1.7
     - uses: dtolnay/rust-toolchain@nightly
     # Update dependencies since we commit the lockfile
     - run: cargo update --verbose
@@ -25,7 +25,7 @@ jobs:
     name: build with no_std
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v4.1.6
+    - uses: actions/checkout@v4.1.7
     - uses: dtolnay/rust-toolchain@master
       with:
         toolchain: stable