diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 23913ca7..386f8715 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -20,7 +20,7 @@ jobs:
           - "3.11"
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3.6.0
+      - uses: actions/checkout@v4.0.0
 
       - uses: actions/setup-python@v4
         with:
diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
index a1f2f240..b46ccb4e 100644
--- a/.github/workflows/docs.yml
+++ b/.github/workflows/docs.yml
@@ -9,7 +9,7 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3.6.0 # v3.3.0
+      - uses: actions/checkout@v4.0.0 # v3.3.0
 
       - uses: actions/setup-python@d27e3f3d7c64b4bbf8e4abfb9b63b83e846e0435 # v4.5.0
         with:
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index 552a3d4a..129aa559 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -10,7 +10,7 @@ jobs:
   lint:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3.6.0
+      - uses: actions/checkout@v4.0.0
 
       - uses: actions/setup-python@v4
         with:
@@ -24,7 +24,7 @@ jobs:
   check-readme:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3.6.0
+      - uses: actions/checkout@v4.0.0
 
       - uses: actions/setup-python@v4
         # NOTE(ww): Important: use pip-audit's minimum supported Python version
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 1fefcc36..d0e20126 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -20,7 +20,7 @@ jobs:
       contents: write
 
     steps:
-    - uses: actions/checkout@v3.6.0
+    - uses: actions/checkout@v4.0.0
 
     - uses: actions/setup-python@v4
       with:
diff --git a/.github/workflows/scorecards.yml b/.github/workflows/scorecards.yml
index 99662420..1662babd 100644
--- a/.github/workflows/scorecards.yml
+++ b/.github/workflows/scorecards.yml
@@ -22,7 +22,7 @@ jobs:
     
     steps:
       - name: "Checkout code"
-        uses: actions/checkout@v3.6.0 # tag=v3.0.0
+        uses: actions/checkout@v4.0.0 # tag=v3.0.0
         with:
           persist-credentials: false