diff --git a/.github/workflows/preview.yml b/.github/workflows/preview.yml
index 81d77c1..53df604 100644
--- a/.github/workflows/preview.yml
+++ b/.github/workflows/preview.yml
@@ -13,9 +13,8 @@ jobs:
     name: Static Analysis
     steps:
       - name: Checkout
-        # for security reasons we pin commit ids and not tags.
-        # actions/checkout@v3.0.2 -> 2541b1294d2704b0964813337f33b291d3f8596b
-        uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b
+        # actions/checkout@v4.1.1
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
         with:
           fetch-depth: 0
 
@@ -64,9 +63,8 @@ jobs:
     name: Unit Tests
     steps:
       - name: Checkout
-        # for security reasons we pin commit ids and not tags.
-        # actions/checkout@v3.0.2 -> 2541b1294d2704b0964813337f33b291d3f8596b
-        uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b
+        # actions/checkout@v4.1.1
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 4c044f0..cdaedbb 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -16,8 +16,8 @@ jobs:
     steps:
       - name: Checkout
         # for security reasons we pin commit ids and not tags.
-        # actions/checkout@v3.0.2 -> 2541b1294d2704b0964813337f33b291d3f8596b
-        uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b
+        # actions/checkout@v4.1.1
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
         with:
           fetch-depth: 0
 
@@ -67,8 +67,8 @@ jobs:
     steps:
       - name: Checkout
         # for security reasons we pin commit ids and not tags.
-        # actions/checkout@v3.0.2 -> 2541b1294d2704b0964813337f33b291d3f8596b
-        uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b
+        # actions/checkout@v4.1.1
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
         with:
           fetch-depth: 0
 
@@ -102,8 +102,8 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        # actions/checkout@v3.0.2
-        uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b
+        # actions/checkout@v4.1.1
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
         with:
           fetch-depth: 0
 
diff --git a/iam.tf b/iam.tf
index 68fd5a6..8220620 100644
--- a/iam.tf
+++ b/iam.tf
@@ -15,7 +15,7 @@ locals {
 }
 
 module "iam" {
-  source = "github.com/mineiros-io/terraform-google-service-account-iam.git?ref=v0.1.0"
+  source = "github.com/mineiros-io/terraform-google-service-account-iam.git?ref=v0.2.0"
 
   # Hack ternary in Terraform to prevent
   #   "Error: Inconsistent conditional result types"
@@ -33,7 +33,7 @@ module "iam" {
 }
 
 module "policy_bindings" {
-  source = "github.com/mineiros-io/terraform-google-service-account-iam.git?ref=v0.1.0"
+  source = "github.com/mineiros-io/terraform-google-service-account-iam.git?ref=v0.2.0"
 
   count = var.policy_bindings != null ? 1 : 0