diff --git a/.github/workflows/action-build.yaml b/.github/workflows/action-build.yaml
index 046731f..7786efb 100644
--- a/.github/workflows/action-build.yaml
+++ b/.github/workflows/action-build.yaml
@@ -42,7 +42,7 @@ jobs:
           diagnostic-endpoint: ""
           use-flakehub: false
       - name: Check out repository
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
         with:
           persist-credentials: false
       - name: Build Lix stores
@@ -109,7 +109,7 @@ jobs:
     runs-on: ${{ matrix.build.runs-on }}
     steps:
       - name: Check out repository
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
         with:
           persist-credentials: false
       - name: Download Lix store from GitHub
diff --git a/.github/workflows/action-publish.yaml b/.github/workflows/action-publish.yaml
index f0e08e6..d0abfc8 100644
--- a/.github/workflows/action-publish.yaml
+++ b/.github/workflows/action-publish.yaml
@@ -68,7 +68,7 @@ jobs:
       pull-requests: write
     steps:
       - name: Check out repository
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
         with:
           persist-credentials: false
       - name: Mark PR as published
diff --git a/.github/workflows/examples-flakes.yaml b/.github/workflows/examples-flakes.yaml
index 623fbf0..c680e2a 100644
--- a/.github/workflows/examples-flakes.yaml
+++ b/.github/workflows/examples-flakes.yaml
@@ -7,7 +7,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: fabrictest/action-setup-lix@d5d7d9aa579140ff7b9b64c02766ed55bb80c3f8 # v0.15.0
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
         with:
           repository: fabrictest/action-setup-lix
           persist-credentials: false
diff --git a/.github/workflows/treefmt.yaml b/.github/workflows/treefmt.yaml
index f9fcb93..6399867 100644
--- a/.github/workflows/treefmt.yaml
+++ b/.github/workflows/treefmt.yaml
@@ -29,7 +29,7 @@ jobs:
           diagnostic-endpoint: ""
           use-flakehub: false
       - name: Check out repository
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
         with:
           persist-credentials: false
       - name: Format files
diff --git a/.github/workflows/zizmor.yaml b/.github/workflows/zizmor.yaml
index f66177f..cb1fee2 100644
--- a/.github/workflows/zizmor.yaml
+++ b/.github/workflows/zizmor.yaml
@@ -31,7 +31,7 @@ jobs:
       security-events: write
     steps:
       - name: Check out repository
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
         with:
           persist-credentials: false
       - name: Lint Github actions and workflows
diff --git a/README.md b/README.md
index cc388ef..eb4f96c 100644
--- a/README.md
+++ b/README.md
@@ -77,7 +77,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: fabrictest/action-setup-lix@d5d7d9aa579140ff7b9b64c02766ed55bb80c3f8 # v0.15.0
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
         with:
           repository: fabrictest/action-setup-lix
           persist-credentials: false