diff --git a/.github/workflows/Line_Endings.yml b/.github/workflows/Line_Endings.yml
index 1e0b51a104..dfd838163f 100644
--- a/.github/workflows/Line_Endings.yml
+++ b/.github/workflows/Line_Endings.yml
@@ -29,7 +29,7 @@ jobs:
     # Steps represent a sequence of tasks that will be executed as part of the job
     steps:
       # Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
-      - uses: actions/checkout@v7
+      - uses: actions/checkout@v7.0.1
         with:
           ref: ${{ inputs.ref || github.sha }}
           persist-credentials: false
diff --git a/.github/workflows/cmake.yml b/.github/workflows/cmake.yml
index aadf16b9d4..a6da4f8a8c 100644
--- a/.github/workflows/cmake.yml
+++ b/.github/workflows/cmake.yml
@@ -91,7 +91,7 @@ jobs:
         sudo apt-get -y update
         sudo apt-get -y install libopenmpi-dev openmpi-bin
 
-    - uses: actions/checkout@v7
+    - uses: actions/checkout@v7.0.1
       with:
         ref: ${{ inputs.ref || github.sha }}
         persist-credentials: false
@@ -168,7 +168,7 @@ jobs:
     runs-on: ${{ matrix.os }}
     steps:
       - name: Checkout code
-        uses: actions/checkout@v7
+        uses: actions/checkout@v7.0.1
         with:
           ref: ${{ inputs.ref || github.sha }}
           persist-credentials: false
@@ -249,7 +249,7 @@ jobs:
         shell: cmd
 
     steps:
-    - uses: actions/checkout@v7
+    - uses: actions/checkout@v7.0.1
       with:
         ref: ${{ inputs.ref || github.sha }}
         persist-credentials: false
diff --git a/.github/workflows/linux.yml b/.github/workflows/linux.yml
index 0d2567ea98..52ee2299ea 100644
--- a/.github/workflows/linux.yml
+++ b/.github/workflows/linux.yml
@@ -40,7 +40,7 @@ jobs:
           mkl@2026.1.0
         prune: false       
          
-    - uses: actions/checkout@v7
+    - uses: actions/checkout@v7.0.1
       with:
         ref: ${{ inputs.ref || github.sha }}
         persist-credentials: false
@@ -78,7 +78,7 @@ jobs:
           mkl@2025.1.0
         prune: false  
 
-    - uses: actions/checkout@v7
+    - uses: actions/checkout@v7.0.1
       with:
         ref: ${{ inputs.ref || github.sha }}
         persist-credentials: false
@@ -103,7 +103,7 @@ jobs:
     runs-on: [ubuntu-latest]
 
     steps:
-    - uses: actions/checkout@v7
+    - uses: actions/checkout@v7.0.1
       with:
         ref: ${{ inputs.ref || github.sha }}
         persist-credentials: false
diff --git a/.github/workflows/osx.yml b/.github/workflows/osx.yml
index 16d0f3c901..08336c1e04 100644
--- a/.github/workflows/osx.yml
+++ b/.github/workflows/osx.yml
@@ -35,7 +35,7 @@ jobs:
         shell: bash
         
     steps:
-    - uses: actions/checkout@v7
+    - uses: actions/checkout@v7.0.1
       with:
         ref: ${{ inputs.ref || github.sha }}
         persist-credentials: false
diff --git a/.github/workflows/pr-security.yml b/.github/workflows/pr-security.yml
index a56518402c..3ba6267085 100644
--- a/.github/workflows/pr-security.yml
+++ b/.github/workflows/pr-security.yml
@@ -31,7 +31,7 @@ jobs:
       cmake: ${{ steps.prepare.outputs.cmake }}
     steps:
       - name: Checkout trusted gate implementation
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           ref: ${{ github.workflow_sha }}
           persist-credentials: false
@@ -78,7 +78,7 @@ jobs:
       contents: read
       statuses: write
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           ref: ${{ github.workflow_sha }}
           persist-credentials: false
@@ -103,7 +103,7 @@ jobs:
       contents: read
       statuses: write
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           ref: ${{ github.workflow_sha }}
           persist-credentials: false
@@ -172,7 +172,7 @@ jobs:
       contents: read
       statuses: write
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           ref: ${{ github.workflow_sha }}
           persist-credentials: false
diff --git a/.github/workflows/virus-scan.yml b/.github/workflows/virus-scan.yml
index ddad0b8be1..7d8fc4195e 100644
--- a/.github/workflows/virus-scan.yml
+++ b/.github/workflows/virus-scan.yml
@@ -25,7 +25,7 @@ jobs:
     timeout-minutes: 45
     steps:
       - name: Checkout trusted scanner implementation only
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           ref: ${{ inputs.policy_sha }}
           persist-credentials: false
diff --git a/.github/workflows/windows.yml b/.github/workflows/windows.yml
index 0157c55764..aa74edeadf 100644
--- a/.github/workflows/windows.yml
+++ b/.github/workflows/windows.yml
@@ -43,7 +43,7 @@ jobs:
         shell: cmd
 
     steps:
-    - uses: actions/checkout@v7
+    - uses: actions/checkout@v7.0.1
       with:
         ref: ${{ inputs.ref || github.sha }}
         persist-credentials: false