diff --git a/.github/workflows/cd.yaml b/.github/workflows/cd.yaml
index d77d38a08..08344b1b0 100644
--- a/.github/workflows/cd.yaml
+++ b/.github/workflows/cd.yaml
@@ -19,7 +19,7 @@ jobs:
       contents: write # Needed for pushing to GitHub Pages
       id-token: write # Needed for publishing to GitHub Pages
     steps:
-      - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
+      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
         with:
           # Needed to push to gh-pages branch
           # IMPORTANT: Avoid publishing the .git/ folder to prevent leaking credentials
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index ea51b3255..8a9722a90 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -17,7 +17,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+        uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
         with:
           persist-credentials: false
       - name: Setting up PDM
@@ -49,7 +49,7 @@ jobs:
           sudo add-apt-repository ppa:openslide/openslide
           sudo apt install -y openslide-tools
       - name: Checkout
-        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+        uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
         with:
           lfs: true
           persist-credentials: false
@@ -68,7 +68,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+        uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
         with:
           persist-credentials: false
       - name: Setting up PDM
@@ -92,7 +92,7 @@ jobs:
       security-events: write # Needed for uploading SARIF reports
     steps:
       - name: Checkout
-        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+        uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
         with:
           persist-credentials: false
       - name: Perform gitleaks checks
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index a1ed484c9..6cc3d4082 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -20,7 +20,7 @@ jobs:
       contents: write # Needed for pushing to GitHub Pages
       pull-requests: write # Needed for creating version bump PR
     steps:
-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
         with:
           # Needed to push to gh-pages branch
           # IMPORTANT: Avoid publishing the .git/ folder to prevent leaking credentials