diff --git a/.github/workflows/deploy-dependencies.yml b/.github/workflows/deploy-dependencies.yml
index c5302047..5dced789 100644
--- a/.github/workflows/deploy-dependencies.yml
+++ b/.github/workflows/deploy-dependencies.yml
@@ -54,7 +54,7 @@ jobs:
       ALERT_EMAIL: ${{ secrets.ALERT_EMAIL }}
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
       - name: Install Traefik
         run: |
           touch environments/${ENV}/traefik/values.override.yaml
diff --git a/.github/workflows/deploy-opencrvs.yml b/.github/workflows/deploy-opencrvs.yml
index 73d3fd81..19df537e 100644
--- a/.github/workflows/deploy-opencrvs.yml
+++ b/.github/workflows/deploy-opencrvs.yml
@@ -84,7 +84,7 @@ jobs:
       - k8s
       - ${{ inputs.environment }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - name: Generate summary
         env:
           PUBLIC_DOMAIN: ${{ vars.DOMAIN }}
diff --git a/.github/workflows/github-to-k8s-sync-env.yml b/.github/workflows/github-to-k8s-sync-env.yml
index a7da944a..4d69cd59 100644
--- a/.github/workflows/github-to-k8s-sync-env.yml
+++ b/.github/workflows/github-to-k8s-sync-env.yml
@@ -142,7 +142,7 @@ jobs:
       - k8s
       - ${{ inputs.environment }}
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
       # Create a temporary file for environment variables
       # to store GitHub Secrets and Variables (base64 encoded)
       # Making those values base64 encoded allows us to avoid further complex escaping issues
diff --git a/.github/workflows/init-release.yml b/.github/workflows/init-release.yml
index 69bb61f3..e9176d1a 100644
--- a/.github/workflows/init-release.yml
+++ b/.github/workflows/init-release.yml
@@ -63,7 +63,7 @@ jobs:
 
       # Full history is required so yarn can traverse the commit graph.
       - name: Checkout ${{ steps.get_base_branch.outputs.base_branch }}
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           ref: ${{ steps.get_base_branch.outputs.base_branch }}
           fetch-depth: 0
diff --git a/.github/workflows/provision.yml b/.github/workflows/provision.yml
index 2c213681..6c647e11 100644
--- a/.github/workflows/provision.yml
+++ b/.github/workflows/provision.yml
@@ -80,7 +80,7 @@ jobs:
           kube_runner_token: ${{ secrets.GH_TOKEN }}
           kube_self_hosted_runner_additional_labels: ${{ vars.KUBE_SELF_HOSTED_RUNNER_ADDITIONAL_LABELS }}
       - name: checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
       - name: Run Ansible Playbook
         uses: dawidd6/action-ansible-playbook@v9
         env:
diff --git a/.github/workflows/reset-2fa.yml b/.github/workflows/reset-2fa.yml
index bfa27ff8..1c416448 100644
--- a/.github/workflows/reset-2fa.yml
+++ b/.github/workflows/reset-2fa.yml
@@ -44,7 +44,7 @@ jobs:
     timeout-minutes: 60
     steps:
       - name: checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
       - name: Run Ansible Playbook
         uses: dawidd6/action-ansible-playbook@v9
         env: