diff --git a/.github/workflows/agent-deb.yml b/.github/workflows/agent-deb.yml
index 784aa25..8f32083 100644
--- a/.github/workflows/agent-deb.yml
+++ b/.github/workflows/agent-deb.yml
@@ -55,7 +55,7 @@ jobs:
             runner: ubuntu-24.04-arm
     steps:
       - name: Checkout main repo
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
@@ -159,7 +159,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout gh-pages (init if missing)
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           ref: gh-pages
           path: pages
diff --git a/.github/workflows/agent-k8s-image.yml b/.github/workflows/agent-k8s-image.yml
index 07bb605..f83358f 100644
--- a/.github/workflows/agent-k8s-image.yml
+++ b/.github/workflows/agent-k8s-image.yml
@@ -49,7 +49,7 @@ jobs:
       sha_short: ${{ steps.tags.outputs.sha_short }}
     steps:
       - name: Checkout main repo
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 55faafc..0991cc9 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -17,7 +17,7 @@ jobs:
     name: rust (clippy + test)
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           submodules: recursive
       - uses: dtolnay/rust-toolchain@stable
@@ -40,7 +40,7 @@ jobs:
       run:
         working-directory: web
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           submodules: recursive
       - uses: actions/setup-node@v4
@@ -57,7 +57,7 @@ jobs:
     name: helm (lint + template)
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: azure/setup-helm@v4
       - name: Lint chart
         run: helm lint helm/shellfleet-agent
diff --git a/.github/workflows/container-images.yml b/.github/workflows/container-images.yml
index 21c40cb..9df2ffb 100644
--- a/.github/workflows/container-images.yml
+++ b/.github/workflows/container-images.yml
@@ -51,7 +51,7 @@ jobs:
           fi
 
       - name: Checkout (with submodules)
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           submodules: recursive
           token: ${{ secrets.SUBMODULES_PAT }}