diff --git a/.github/workflows/_dependabot-actions-review.yml b/.github/workflows/_dependabot-actions-review.yml
index 966c111..4a73353 100644
--- a/.github/workflows/_dependabot-actions-review.yml
+++ b/.github/workflows/_dependabot-actions-review.yml
@@ -45,7 +45,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v7
+        uses: actions/checkout@v7.0.1
         with:
           token: ${{ secrets.DEPENDABOT_REVIEWER_TOKEN || github.token }}
 
diff --git a/.github/workflows/_release.yml b/.github/workflows/_release.yml
index 555cb0f..6bbe4eb 100644
--- a/.github/workflows/_release.yml
+++ b/.github/workflows/_release.yml
@@ -60,7 +60,7 @@ jobs:
           fi
 
       - name: Checkout
-        uses: actions/checkout@v7
+        uses: actions/checkout@v7.0.1
         with:
           fetch-depth: 0
           ref: ${{ steps.checkout_ref.outputs.value }}
@@ -173,7 +173,7 @@ jobs:
       DRAFT: ${{ needs.config.outputs.draft }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v7
+        uses: actions/checkout@v7.0.1
         with:
           fetch-depth: 0
           ref: ${{ needs.config.outputs.target_sha }}
diff --git a/.github/workflows/docker-ops.yml b/.github/workflows/docker-ops.yml
index 5f3edd6..4c58608 100644
--- a/.github/workflows/docker-ops.yml
+++ b/.github/workflows/docker-ops.yml
@@ -245,7 +245,7 @@ jobs:
           echo "📋 Working directory: ${INPUT_WORKING_DIRECTORY}"
 
       - name: Checkout code
-        uses: actions/checkout@v7
+        uses: actions/checkout@v7.0.1
         with:
           fetch-depth: 0
 
@@ -955,7 +955,7 @@ jobs:
         run: rm -rf /opt/hostedtoolcache
 
       - name: Checkout code
-        uses: actions/checkout@v7
+        uses: actions/checkout@v7.0.1
 
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v4
@@ -1123,7 +1123,7 @@ jobs:
       WORKING_DIRECTORY: ${{ needs.config.outputs.working_directory }}
     steps:
       - name: Checkout code
-        uses: actions/checkout@v7
+        uses: actions/checkout@v7.0.1
         with:
           fetch-depth: 0
 
@@ -1275,7 +1275,7 @@ jobs:
       BUILD_ARGS: ${{ needs.config.outputs.build_args }}
     steps:
       - name: Checkout code
-        uses: actions/checkout@v7
+        uses: actions/checkout@v7.0.1
         with:
           fetch-depth: 0
 
@@ -1428,7 +1428,7 @@ jobs:
       BUILD_ARGS: ${{ needs.config.outputs.build_args }}
     steps:
       - name: Checkout code
-        uses: actions/checkout@v7
+        uses: actions/checkout@v7.0.1
         with:
           fetch-depth: 0
 
@@ -1677,7 +1677,7 @@ jobs:
       BUILD_ARGS: ${{ needs.config.outputs.build_args }}
     steps:
       - name: Checkout code
-        uses: actions/checkout@v7
+        uses: actions/checkout@v7.0.1
         with:
           fetch-depth: 0
 
@@ -1845,7 +1845,7 @@ jobs:
       BUILD_ARGS: ${{ needs.config.outputs.build_args }}
     steps:
       - name: Checkout code
-        uses: actions/checkout@v7
+        uses: actions/checkout@v7.0.1
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/js-ops.yml b/.github/workflows/js-ops.yml
index 9f007ca..5617a58 100644
--- a/.github/workflows/js-ops.yml
+++ b/.github/workflows/js-ops.yml
@@ -119,7 +119,7 @@ jobs:
       resolved_cancel_in_progress: ${{ steps.concurrency.outputs.resolved_cancel_in_progress }}
     steps:
       - name: Checkout code
-        uses: actions/checkout@v7
+        uses: actions/checkout@v7.0.1
 
       - name: Validate inputs
         id: validate
@@ -592,7 +592,7 @@ jobs:
       RELEASE_EXISTS: ${{ needs.config.outputs.release_exists }}
     steps:
       - name: Checkout code
-        uses: actions/checkout@v7
+        uses: actions/checkout@v7.0.1
 
       - name: Setup pnpm
         if: ${{ needs.config.outputs.package_manager == 'pnpm' }}
diff --git a/.github/workflows/npm-release-ops.yml b/.github/workflows/npm-release-ops.yml
index f000ade..26b9e82 100644
--- a/.github/workflows/npm-release-ops.yml
+++ b/.github/workflows/npm-release-ops.yml
@@ -62,7 +62,7 @@ jobs:
       WORKING_DIRECTORY: "."
     steps:
       - name: Checkout code
-        uses: actions/checkout@v7
+        uses: actions/checkout@v7.0.1
 
       - name: Store inputs as outputs
         id: store_inputs
@@ -221,7 +221,7 @@ jobs:
       WORKING_DIRECTORY: ${{ needs.config.outputs.working_directory }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v7
+        uses: actions/checkout@v7.0.1
 
       - name: Setup Node.js
         uses: actions/setup-node@v7
@@ -265,7 +265,7 @@ jobs:
       CHANGELOG_DESCRIPTION: ${{ needs.config.outputs.changelog_description }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v7
+        uses: actions/checkout@v7.0.1
         with:
           fetch-depth: 0
 
@@ -313,7 +313,7 @@ jobs:
       DIST_DIR: ${{ needs.config.outputs.dist_dir }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v7
+        uses: actions/checkout@v7.0.1
 
       - name: Setup Node.js
         uses: actions/setup-node@v7
diff --git a/.github/workflows/wp-gh-release-ops.yml b/.github/workflows/wp-gh-release-ops.yml
index d754bd7..ec7d09f 100644
--- a/.github/workflows/wp-gh-release-ops.yml
+++ b/.github/workflows/wp-gh-release-ops.yml
@@ -31,7 +31,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v7
+        uses: actions/checkout@v7.0.1
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/wp-org-svn-deploy.yml b/.github/workflows/wp-org-svn-deploy.yml
index f854fe1..29be1fc 100644
--- a/.github/workflows/wp-org-svn-deploy.yml
+++ b/.github/workflows/wp-org-svn-deploy.yml
@@ -48,7 +48,7 @@ jobs:
           TAG: ${{ inputs.tag }}
 
       - name: Checkout release tag
-        uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           ref: refs/tags/${{ inputs.tag }}