diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml
index 0175a5d..908d871 100644
--- a/.github/workflows/docker.yml
+++ b/.github/workflows/docker.yml
@@ -15,7 +15,7 @@ jobs:
   docker:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       # Reuses the Makefile targets so the docker commands live in one place
       # and CI validates the same entry points developers use.
diff --git a/.github/workflows/security-updates.yml b/.github/workflows/security-updates.yml
index 503bb9f..63bc708 100644
--- a/.github/workflows/security-updates.yml
+++ b/.github/workflows/security-updates.yml
@@ -13,7 +13,7 @@ jobs:
   security-updates:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
       - uses: Komorebi-AI/github-actions/security-updates@main