diff --git a/.github/workflows/infra-helm-unittest.yml b/.github/workflows/infra-helm-unittest.yml
index 6fe4b94..9c0857c 100644
--- a/.github/workflows/infra-helm-unittest.yml
+++ b/.github/workflows/infra-helm-unittest.yml
@@ -12,7 +12,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-    - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
+    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
 
     - name: Set up Docker Buildx
       uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3
diff --git a/.github/workflows/job-auto-labeler.yml b/.github/workflows/job-auto-labeler.yml
index 92670f3..422f9b8 100644
--- a/.github/workflows/job-auto-labeler.yml
+++ b/.github/workflows/job-auto-labeler.yml
@@ -7,7 +7,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
       - name: Run auto-labeler
         id: auto-labeler
         uses: mauroalderete/action-assign-labels@671a4ca2da0f900464c58b8b5540a1e07133e915 # v1
diff --git a/.github/workflows/job-check-helm-chart-docs.yml b/.github/workflows/job-check-helm-chart-docs.yml
index 38ecc09..11e8a4e 100644
--- a/.github/workflows/job-check-helm-chart-docs.yml
+++ b/.github/workflows/job-check-helm-chart-docs.yml
@@ -22,7 +22,7 @@ jobs:
   docs:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
       - name: Run helm-docs
         uses: losisin/helm-docs-github-action@6f957579ac122ecc167bf515fe84e828686c9a15 # v1
         with:
diff --git a/.github/workflows/job-create-version.yml b/.github/workflows/job-create-version.yml
index b62863a..0e41423 100644
--- a/.github/workflows/job-create-version.yml
+++ b/.github/workflows/job-create-version.yml
@@ -25,7 +25,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Set up repository
-        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
         with:
           fetch-depth: 0
           ref: ${{ github.head_ref || github.ref }}
diff --git a/.github/workflows/job-golang-lint.yml b/.github/workflows/job-golang-lint.yml
index 9436d6b..4ec4354 100644
--- a/.github/workflows/job-golang-lint.yml
+++ b/.github/workflows/job-golang-lint.yml
@@ -13,7 +13,7 @@ jobs:
     env:
       GOSUMDB: off
     steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
       - uses: actions/setup-go@7a3fe6cf4cb3a834922a1244abfce67bcef6a0c5 # v6
         with:
           go-version-file: 'go.mod'
diff --git a/.github/workflows/job-license-metadata.yml b/.github/workflows/job-license-metadata.yml
index b0c3d53..75052f7 100644
--- a/.github/workflows/job-license-metadata.yml
+++ b/.github/workflows/job-license-metadata.yml
@@ -20,7 +20,7 @@ jobs:
       - name: Login Gitub CLI
         run: |
           gh auth login --with-token <<< "${{ secrets.GITHUB_TOKEN }}"
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
         with:
           path: repo
           fetch-depth: 0  # Fetch all history for git diff
diff --git a/.github/workflows/job-node-publish.yml b/.github/workflows/job-node-publish.yml
index cfcb938..d0b9b21 100644
--- a/.github/workflows/job-node-publish.yml
+++ b/.github/workflows/job-node-publish.yml
@@ -51,7 +51,7 @@ jobs:
       with:
         app-id: "838464"
         private-key: ${{ secrets.OPENMFP_PUBLISHER_PRIVATE_KEY }}
-    - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
+    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
       with:
         token: ${{ steps.app-token.outputs.token }}
     - uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6
diff --git a/.github/workflows/job-node-test.yml b/.github/workflows/job-node-test.yml
index 7374f1c..ce09b45 100644
--- a/.github/workflows/job-node-test.yml
+++ b/.github/workflows/job-node-test.yml
@@ -36,7 +36,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-    - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
+    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
     - uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6
       with:
         node-version: ${{ inputs.node_version }}
diff --git a/.github/workflows/job-ocm.yml b/.github/workflows/job-ocm.yml
index b5d24c8..ac2602c 100644
--- a/.github/workflows/job-ocm.yml
+++ b/.github/workflows/job-ocm.yml
@@ -33,7 +33,7 @@ jobs:
               chmod +x /home/runner/.local/bin/yq
           fi
       - name: Check out the repo
-        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
       - name: setup OCM CLI
         run: |
           REPO=${repo:=open-component-model/ocm}
diff --git a/.github/workflows/job-push-tag.yml b/.github/workflows/job-push-tag.yml
index 7a869bc..d0a8472 100644
--- a/.github/workflows/job-push-tag.yml
+++ b/.github/workflows/job-push-tag.yml
@@ -9,7 +9,7 @@ jobs:
   ghTag:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
       - name: Publish GH Tag
         uses: thejeff77/action-push-tag@f110b453ffb8c4d18880b7338f75e6725b731d81 # v1.0.0
         with:
diff --git a/.github/workflows/job-release-chart.yml b/.github/workflows/job-release-chart.yml
index e35c8e6..c033391 100644
--- a/.github/workflows/job-release-chart.yml
+++ b/.github/workflows/job-release-chart.yml
@@ -43,7 +43,7 @@ jobs:
     runs-on: ubuntu-latest
     if: ${{ (github.head_ref || github.ref) == format('refs/heads/{0}',inputs.release_branch) }}
     steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
       - name: Setup yq@latest
         if: ${{ inputs.updateVersion }}
         run: |
diff --git a/.github/workflows/job-scan-kubernetes-vulnerability.yml b/.github/workflows/job-scan-kubernetes-vulnerability.yml
index bf73a9c..f38d609 100644
--- a/.github/workflows/job-scan-kubernetes-vulnerability.yml
+++ b/.github/workflows/job-scan-kubernetes-vulnerability.yml
@@ -12,7 +12,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/job-test-chart.yml b/.github/workflows/job-test-chart.yml
index 961902d..b036e1b 100644
--- a/.github/workflows/job-test-chart.yml
+++ b/.github/workflows/job-test-chart.yml
@@ -32,7 +32,7 @@ jobs:
         username: ${{ github.actor }}
         password: ${{ secrets.github_token }}
     steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
         with:
           ref: ${{ inputs.branch }}
       - name: Unit Testing Chart
@@ -41,7 +41,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
         with:
           fetch-depth: 0
       - name: Set up Helm
diff --git a/.github/workflows/job-update-version-file.yml b/.github/workflows/job-update-version-file.yml
index 9eaff03..f87ffd2 100644
--- a/.github/workflows/job-update-version-file.yml
+++ b/.github/workflows/job-update-version-file.yml
@@ -42,7 +42,7 @@ jobs:
           owner: ${{ github.repository_owner }}
           repositories: |
             versions
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
         with:
           token: ${{ steps.app-token.outputs.token }}
           repository: ${{ inputs.versionRepo }}
diff --git a/.github/workflows/pipeline-k8s-checks.yml b/.github/workflows/pipeline-k8s-checks.yml
index f63bb41..14994a0 100644
--- a/.github/workflows/pipeline-k8s-checks.yml
+++ b/.github/workflows/pipeline-k8s-checks.yml
@@ -41,7 +41,7 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
 
       - name: kube-score install
         uses: yokawasa/action-setup-kube-tools@3e3886c11bfa25fe33f8eb90f59542dd151da442 # v0.13.1
diff --git a/.github/workflows/promote-stack.yaml b/.github/workflows/promote-stack.yaml
index a2233ce..fe85217 100644
--- a/.github/workflows/promote-stack.yaml
+++ b/.github/workflows/promote-stack.yaml
@@ -27,7 +27,7 @@ jobs:
           app-id: "838464"
           private-key: ${{ secrets.OPENMFP_PUBLISHER_PRIVATE_KEY }}
           owner: ${{ github.repository_owner }}
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
         with:
           repository: ${{ inputs.stackRepo }}
           ref: ${{ inputs.targetBranch }}