diff --git a/.github/workflows/helm-release-differ.yaml b/.github/workflows/helm-release-differ.yaml
index 7bee0d01e..0cdf9c3b1 100644
--- a/.github/workflows/helm-release-differ.yaml
+++ b/.github/workflows/helm-release-differ.yaml
@@ -18,7 +18,7 @@ jobs:
     name: Detect File Changes
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+      - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
       - uses: dorny/paths-filter@v2
         id: filter
         with:
@@ -37,7 +37,7 @@ jobs:
         file: ${{ fromJSON(needs.detect-file-changes.outputs.yaml_files) }}
     steps:
       - name: Checkout
-        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
       - name: Generate Token
         uses: tibdex/github-app-token@v2
         id: generate-token
@@ -45,7 +45,7 @@ jobs:
           app_id: ${{ secrets.BOT_APP_ID }}
           private_key: ${{ secrets.BOT_APP_PRIVATE_KEY }}
       - name: Checkout default branch
-        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
         with:
           ref: "${{ env.DEFAULT_BRANCH }}"
           path: default
diff --git a/.github/workflows/megalinter.yaml b/.github/workflows/megalinter.yaml
index e4fedec54..489144b82 100644
--- a/.github/workflows/megalinter.yaml
+++ b/.github/workflows/megalinter.yaml
@@ -17,7 +17,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
         with:
           fetch-depth: 0
       - name: Generate Token
diff --git a/.github/workflows/meta-sync-labels.yaml b/.github/workflows/meta-sync-labels.yaml
index c3da68156..e3daa86c5 100644
--- a/.github/workflows/meta-sync-labels.yaml
+++ b/.github/workflows/meta-sync-labels.yaml
@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
       - name: Generate Token
         uses: tibdex/github-app-token@v2
         id: generate-token
diff --git a/.github/workflows/publish-docs.yaml b/.github/workflows/publish-docs.yaml
index 473d37027..7e06a07b5 100644
--- a/.github/workflows/publish-docs.yaml
+++ b/.github/workflows/publish-docs.yaml
@@ -17,7 +17,7 @@ jobs:
     runs-on: ubuntu-20.04
     if: github.event.pull_request.head.repo.fork == false
     steps:
-      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+      - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
       - uses: actions/setup-python@v4
         with:
           python-version: 3.x
diff --git a/.github/workflows/scan-containers.yaml b/.github/workflows/scan-containers.yaml
index 0e7b92404..101069f3a 100644
--- a/.github/workflows/scan-containers.yaml
+++ b/.github/workflows/scan-containers.yaml
@@ -14,7 +14,7 @@ jobs:
     name: Detect File Changes
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+      - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
       - uses: dorny/paths-filter@v2
         id: filter
         with:
@@ -36,7 +36,7 @@ jobs:
         file: ${{ fromJSON(needs.detect-file-changes.outputs.yaml_files) }}
     steps:
       - name: Checkout
-        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
       - name: Install Jo
         run: |
           sudo apt-get install jo
@@ -57,7 +57,7 @@ jobs:
       fail-fast: false
     steps:
       - name: Checkout
-        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
       - name: Scan Container
         uses: aquasecurity/trivy-action@0.12.0
         with:
diff --git a/.github/workflows/schedule-cloudflare-proxied-networks-update.yaml b/.github/workflows/schedule-cloudflare-proxied-networks-update.yaml
index 7d8154d94..150dfdea4 100644
--- a/.github/workflows/schedule-cloudflare-proxied-networks-update.yaml
+++ b/.github/workflows/schedule-cloudflare-proxied-networks-update.yaml
@@ -16,7 +16,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
       - name: Generate Token
         uses: tibdex/github-app-token@v2
         id: generate-token
diff --git a/.github/workflows/schedule-library-chart-update.yaml b/.github/workflows/schedule-library-chart-update.yaml
index eaeae9018..626bd49d7 100644
--- a/.github/workflows/schedule-library-chart-update.yaml
+++ b/.github/workflows/schedule-library-chart-update.yaml
@@ -12,7 +12,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
       - name: Generate Token
         uses: tibdex/github-app-token@v2
         id: generate-token
diff --git a/.github/workflows/schedule-link-checker.yaml b/.github/workflows/schedule-link-checker.yaml
index b7637802f..c542a1180 100644
--- a/.github/workflows/schedule-link-checker.yaml
+++ b/.github/workflows/schedule-link-checker.yaml
@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
       - name: Generate Token
         uses: tibdex/github-app-token@v2
         id: generate-token
diff --git a/.github/workflows/schedule-renovate-annotations.yaml b/.github/workflows/schedule-renovate-annotations.yaml
index 8a93f943b..cdf24c012 100644
--- a/.github/workflows/schedule-renovate-annotations.yaml
+++ b/.github/workflows/schedule-renovate-annotations.yaml
@@ -30,7 +30,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
       - name: Verify Renovate Configuration
         uses: suzuki-shunsuke/github-action-renovate-config-validator@v0.1.3
       - name: Generate Token