diff --git a/.github/workflows/1edtech-pr.yml b/.github/workflows/1edtech-pr.yml
index 43247fe7dc..901f51a0ff 100644
--- a/.github/workflows/1edtech-pr.yml
+++ b/.github/workflows/1edtech-pr.yml
@@ -21,7 +21,7 @@ jobs:
     name: Check linting issues
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3.1.0
       - name: Ensure builds/ has not changed
         run: |
           curl -sL https://api.github.com/repos/w3c/respec/pulls/${{ github.event.pull_request.number }}/files -o /tmp/pr_files.json
@@ -37,7 +37,7 @@ jobs:
     runs-on: ubuntu-latest
     needs: lint
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3.1.0
       - uses: actions/setup-node@v2
         with: { node-version: 14, cache: npm }
       - run: npm ci
@@ -55,7 +55,7 @@ jobs:
     runs-on: ubuntu-latest
     needs: lint
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3.1.0
       - uses: actions/setup-node@v2
         with: { node-version: 14, cache: npm }
       - name: install & build
diff --git a/.github/workflows/changelog.yml b/.github/workflows/changelog.yml
index 2c56143b7a..20af5092e9 100644
--- a/.github/workflows/changelog.yml
+++ b/.github/workflows/changelog.yml
@@ -10,7 +10,7 @@ jobs:
     name: Update Changelog
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3.1.0
         with:
           ref: develop
       - uses: ruby/setup-ruby@v1
diff --git a/.github/workflows/pr.yml b/.github/workflows/pr.yml
index e20bc2d2c8..e8bb593bee 100644
--- a/.github/workflows/pr.yml
+++ b/.github/workflows/pr.yml
@@ -21,7 +21,7 @@ jobs:
     name: Check linting issues
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3.1.0
       - name: Ensure builds/ has not changed
         run: |
           curl -sL https://api.github.com/repos/w3c/respec/pulls/${{ github.event.pull_request.number }}/files -o /tmp/pr_files.json
@@ -37,7 +37,7 @@ jobs:
     runs-on: ubuntu-latest
     needs: lint
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3.1.0
       - uses: actions/setup-node@v2
         with: { node-version: 14, cache: npm }
       - run: npm ci
@@ -53,7 +53,7 @@ jobs:
     runs-on: ubuntu-latest
     needs: lint
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3.1.0
       - uses: actions/setup-node@v2
         with: { node-version: 14, cache: npm }
       - name: install & build
@@ -72,7 +72,7 @@ jobs:
     runs-on: ubuntu-latest
     needs: lint
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3.1.0
       - uses: actions/setup-node@v2
         with: { node-version: 14, cache: npm }
       - name: install & build
diff --git a/.github/workflows/push.yml b/.github/workflows/push.yml
index ccfa1c840d..76938cfc69 100644
--- a/.github/workflows/push.yml
+++ b/.github/workflows/push.yml
@@ -23,7 +23,7 @@ jobs:
     name: Headless Tests
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3.1.0
       - uses: actions/setup-node@v2
         with: { node-version: 14, cache: npm }
       - name: install & build
@@ -48,7 +48,7 @@ jobs:
     name: Karma Unit Tests (Chrome)
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3.1.0
       - uses: actions/setup-node@v2
         with: { node-version: 14, cache: npm }
       - name: install & build
diff --git a/.github/workflows/regressions.yml b/.github/workflows/regressions.yml
index 2c6afcb595..adb3f222b5 100644
--- a/.github/workflows/regressions.yml
+++ b/.github/workflows/regressions.yml
@@ -11,7 +11,7 @@ jobs:
     name: Build W3C profile
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3.1.0
       - uses: actions/setup-node@v2
         with: { node-version: 14, cache: npm }
       - run: npm ci
@@ -40,7 +40,7 @@ jobs:
           - https://w3c.github.io/geolocation-api/
       fail-fast: false
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3.1.0
       - uses: actions/setup-node@v2
         with: { node-version: 14, cache: npm }
       - run: npm ci --production --ignore-scripts