diff --git a/.github/workflows/build_docker.yaml b/.github/workflows/build_docker.yaml
index b25a29e638d..3ddc4b3cac5 100644
--- a/.github/workflows/build_docker.yaml
+++ b/.github/workflows/build_docker.yaml
@@ -36,7 +36,7 @@ jobs:
         working-directory: operations
     steps:
       - name: Check Out Changes
-        uses: actions/checkout@a12a3943b4bdde767164f792f33f40b04645d846
+        uses: actions/checkout@dcd71f646680f2efd8db4afa5ad64fdcba30e748
 
       - name: Build Docker Terraform CLI
         run: |
@@ -55,7 +55,7 @@ jobs:
         AZ_ENV: [ rkh5012, test, staging, prod ]
     steps:
       - name: Check Out Changes
-        uses: actions/checkout@a12a3943b4bdde767164f792f33f40b04645d846
+        uses: actions/checkout@dcd71f646680f2efd8db4afa5ad64fdcba30e748
 
       - name: Build Docker Terraform CLI
         run: |
diff --git a/.github/workflows/build_frontend.yaml b/.github/workflows/build_frontend.yaml
index 394bf6f2b68..1d51cdb9e71 100644
--- a/.github/workflows/build_frontend.yaml
+++ b/.github/workflows/build_frontend.yaml
@@ -19,7 +19,7 @@ jobs:
       version: ${{ steps.build_vars.outputs.version }}
     steps:
       - name: "Check out changes"
-        uses: actions/checkout@a12a3943b4bdde767164f792f33f40b04645d846
+        uses: actions/checkout@dcd71f646680f2efd8db4afa5ad64fdcba30e748
       - name: Build vars
         id: build_vars
         uses: ./.github/actions/build-vars
@@ -43,7 +43,7 @@ jobs:
 
     steps:
       - name: "Check out changes"
-        uses: actions/checkout@a12a3943b4bdde767164f792f33f40b04645d846
+        uses: actions/checkout@dcd71f646680f2efd8db4afa5ad64fdcba30e748
 
       - name: Build frontend
         uses: ./.github/actions/build-frontend
diff --git a/.github/workflows/build_hub.yml b/.github/workflows/build_hub.yml
index 5450db6e732..d7323a821b6 100644
--- a/.github/workflows/build_hub.yml
+++ b/.github/workflows/build_hub.yml
@@ -22,7 +22,7 @@ jobs:
       has_router_change: ${{ steps.skip_check.outputs.router }}
     steps:
       - name: "Check out changes"
-        uses: actions/checkout@a12a3943b4bdde767164f792f33f40b04645d846
+        uses: actions/checkout@dcd71f646680f2efd8db4afa5ad64fdcba30e748
       - uses: dorny/paths-filter@v2
         id: skip_check
         with:
@@ -43,7 +43,7 @@ jobs:
 
     steps:
       - name: "Check out changes"
-        uses: actions/checkout@a12a3943b4bdde767164f792f33f40b04645d846
+        uses: actions/checkout@dcd71f646680f2efd8db4afa5ad64fdcba30e748
 
       # Appears not to be needed on GitHub (but needed when running act [https://github.com/nektos/act] locally)
       # - name: Install docker-compose
@@ -199,7 +199,7 @@ jobs:
 
     steps:
       - name: "Check out changes"
-        uses: actions/checkout@a12a3943b4bdde767164f792f33f40b04645d846
+        uses: actions/checkout@dcd71f646680f2efd8db4afa5ad64fdcba30e748
 
       - name: Set up JDK 11
         uses: actions/setup-java@f69f00b5e5324696b07f6b1c92f0470a6df00780
diff --git a/.github/workflows/github_release.yaml b/.github/workflows/github_release.yaml
index 2c21e1d0f48..7a543618227 100644
--- a/.github/workflows/github_release.yaml
+++ b/.github/workflows/github_release.yaml
@@ -19,7 +19,7 @@ jobs:
       enable_builds: 'true'
     steps:
       - name: Check out changes
-        uses: actions/checkout@a12a3943b4bdde767164f792f33f40b04645d846
+        uses: actions/checkout@dcd71f646680f2efd8db4afa5ad64fdcba30e748
         with:
           fetch-depth: 0
       - name: Build vars
@@ -36,7 +36,7 @@ jobs:
         working-directory: prime-router
     steps:
       - name: Check out changes
-        uses: actions/checkout@a12a3943b4bdde767164f792f33f40b04645d846
+        uses: actions/checkout@dcd71f646680f2efd8db4afa5ad64fdcba30e748
       - name: Build backend
         if: ${{ needs.wf_vars.outputs.enable_builds == 'true' }}
         uses: ./.github/actions/build-backend
@@ -53,7 +53,7 @@ jobs:
         working-directory: frontend-react
     steps:
       - name: Check out changes
-        uses: actions/checkout@a12a3943b4bdde767164f792f33f40b04645d846
+        uses: actions/checkout@dcd71f646680f2efd8db4afa5ad64fdcba30e748
       - name: Build frontend
         if: ${{ needs.wf_vars.outputs.enable_builds == 'true' }}
         uses: ./.github/actions/build-frontend
@@ -72,7 +72,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check out changes
-        uses: actions/checkout@a12a3943b4bdde767164f792f33f40b04645d846
+        uses: actions/checkout@dcd71f646680f2efd8db4afa5ad64fdcba30e748
         with:
           fetch-depth: 0
       - name: Download router artifact
diff --git a/.github/workflows/prepare_deployment_branch.yaml b/.github/workflows/prepare_deployment_branch.yaml
index 30c1f053de0..9e81d7480f2 100644
--- a/.github/workflows/prepare_deployment_branch.yaml
+++ b/.github/workflows/prepare_deployment_branch.yaml
@@ -12,7 +12,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: "Check out changes"
-        uses: actions/checkout@a12a3943b4bdde767164f792f33f40b04645d846
+        uses: actions/checkout@dcd71f646680f2efd8db4afa5ad64fdcba30e748
 
       - name: Set Environment Variables
         # 86400: seconds in a 24h time-window
diff --git a/.github/workflows/publish_docker.yaml b/.github/workflows/publish_docker.yaml
index 946903c9f46..61affbd0c38 100644
--- a/.github/workflows/publish_docker.yaml
+++ b/.github/workflows/publish_docker.yaml
@@ -17,7 +17,7 @@ jobs:
       has_dnsmasq_change: ${{ steps.skip_check.outputs.dnsmasq }}
     steps:
       - name: "Check out changes"
-        uses: actions/checkout@a12a3943b4bdde767164f792f33f40b04645d846
+        uses: actions/checkout@dcd71f646680f2efd8db4afa5ad64fdcba30e748
       - uses: dorny/paths-filter@v2
         id: skip_check
         with:
@@ -45,7 +45,7 @@ jobs:
       packages: write
     steps:
       - name: Check Out Changes
-        uses: actions/checkout@a12a3943b4bdde767164f792f33f40b04645d846
+        uses: actions/checkout@dcd71f646680f2efd8db4afa5ad64fdcba30e748
 
       - name: Log In to the Container Registry
         uses: docker/login-action@dd4fa0671be5250ee6f50aedf4cb05514abda2c7
@@ -80,7 +80,7 @@ jobs:
         AZ_ENV: [ rkh5012, test, staging, prod ]
     steps:
       - name: Check Out Changes
-        uses: actions/checkout@a12a3943b4bdde767164f792f33f40b04645d846
+        uses: actions/checkout@dcd71f646680f2efd8db4afa5ad64fdcba30e748
 
       - name: Log In to the Container Registry
         uses: docker/login-action@dd4fa0671be5250ee6f50aedf4cb05514abda2c7
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index e2651c3ebb7..9c1ed1e36f7 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -22,7 +22,7 @@ jobs:
       has_react_change: ${{ steps.build_vars.outputs.has_react_change }}
     steps:
       - name: Check out changes
-        uses: actions/checkout@a12a3943b4bdde767164f792f33f40b04645d846
+        uses: actions/checkout@dcd71f646680f2efd8db4afa5ad64fdcba30e748
 
       - name: Build vars
         id: build_vars
@@ -36,7 +36,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check out changes
-        uses: actions/checkout@a12a3943b4bdde767164f792f33f40b04645d846
+        uses: actions/checkout@dcd71f646680f2efd8db4afa5ad64fdcba30e748
 
       - name: Build backend
         uses: ./.github/actions/build-backend
@@ -54,7 +54,7 @@ jobs:
         working-directory: frontend-react
     steps:
       - name: Check out changes
-        uses: actions/checkout@a12a3943b4bdde767164f792f33f40b04645d846
+        uses: actions/checkout@dcd71f646680f2efd8db4afa5ad64fdcba30e748
 
       - name: Build frontend
         uses: ./.github/actions/build-frontend
@@ -79,7 +79,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check out changes
-        uses: actions/checkout@a12a3943b4bdde767164f792f33f40b04645d846
+        uses: actions/checkout@dcd71f646680f2efd8db4afa5ad64fdcba30e748
 
       - name: Connect to VPN and login to Azure
         uses: ./.github/actions/vpn-azure
diff --git a/.github/workflows/restore_databases.yml b/.github/workflows/restore_databases.yml
index 477295511a1..b670d83118e 100644
--- a/.github/workflows/restore_databases.yml
+++ b/.github/workflows/restore_databases.yml
@@ -57,7 +57,7 @@ jobs:
       sink_backup_storage: ${{ env.SINK_BACKUP_STORAGE }}
     steps:
       - name: Check out changes
-        uses: actions/checkout@v2
+        uses: actions/checkout@dcd71f646680f2efd8db4afa5ad64fdcba30e748
 
       - name: Set env variables
         shell: bash
@@ -124,7 +124,7 @@ jobs:
        backup_age_valid: ${{ env.BACKUP_AGE_VALID }}
     steps:
       - name: Check out changes
-        uses: actions/checkout@v2
+        uses: actions/checkout@dcd71f646680f2efd8db4afa5ad64fdcba30e748
 
       - name: Connect to VPN and login to Azure
         uses: ./.github/actions/vpn-azure
@@ -219,7 +219,7 @@ jobs:
       sink_db_server: ${{ needs.pre_job.outputs.sink_db_server }}
     steps:
       - name: Check out changes
-        uses: actions/checkout@v2
+        uses: actions/checkout@dcd71f646680f2efd8db4afa5ad64fdcba30e748
 
       - name: Connect to VPN and login to Azure
         uses: ./.github/actions/vpn-azure
diff --git a/.github/workflows/run_gitleaks.yaml b/.github/workflows/run_gitleaks.yaml
index c4452579c7c..3fa7dac6e3f 100644
--- a/.github/workflows/run_gitleaks.yaml
+++ b/.github/workflows/run_gitleaks.yaml
@@ -9,7 +9,7 @@ jobs:
   gitleaks:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@a12a3943b4bdde767164f792f33f40b04645d846
+      - uses: actions/checkout@dcd71f646680f2efd8db4afa5ad64fdcba30e748
         with:
           # Fetch the full history
           fetch-depth: 0
diff --git a/.github/workflows/validate_terraform.yml b/.github/workflows/validate_terraform.yml
index 0980f2f21ce..5524458da87 100644
--- a/.github/workflows/validate_terraform.yml
+++ b/.github/workflows/validate_terraform.yml
@@ -35,7 +35,7 @@ jobs:
         working-directory: operations
     steps:
       - name: Check Out Changes
-        uses: actions/checkout@a12a3943b4bdde767164f792f33f40b04645d846
+        uses: actions/checkout@dcd71f646680f2efd8db4afa5ad64fdcba30e748
 
       - name: Verify Terraform Formatting
         run: |
@@ -53,7 +53,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check Out Changes
-        uses: actions/checkout@a12a3943b4bdde767164f792f33f40b04645d846
+        uses: actions/checkout@dcd71f646680f2efd8db4afa5ad64fdcba30e748
 
       - name: Login to Azure CLI
         uses: azure/login@v1