diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index 240ce71..85b6ede 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -10,7 +10,7 @@ jobs:
       - job=lint
       - extras=s3-cache
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
       - uses: citizensadvice/python-uv-setup-action@70884aff70491439526c3e437c25803b9e67aaed
       - uses: extractions/setup-just@53165ef7e734c5c07cb06b3c8e7b647c5aa16db3
       - run: just lint
@@ -22,7 +22,7 @@ jobs:
       - job=audit-dependencies
       - extras=s3-cache
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
         with:
           sparse-checkout: |
             uv.lock