diff --git a/.github/workflows/distros.yml b/.github/workflows/distros.yml
index 182e6db6..9f2b0968 100644
--- a/.github/workflows/distros.yml
+++ b/.github/workflows/distros.yml
@@ -23,7 +23,7 @@ jobs:
       pull-requests: write  # for technote-space/create-pr-action to create a PR
     runs-on: macos-12
     steps:
-      - uses: actions/checkout@v4.2.1
+      - uses: actions/checkout@v4.2.2
       - uses: actions/cache@v4.1.2
         with:
           path: ~/.vagrant.d/boxes
diff --git a/.github/workflows/linter.yml b/.github/workflows/linter.yml
index 960a300a..54884c62 100644
--- a/.github/workflows/linter.yml
+++ b/.github/workflows/linter.yml
@@ -19,14 +19,14 @@ jobs:
     name: Check documentation external links
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4.2.1
+      - uses: actions/checkout@v4.2.2
       - name: Check broken links
         uses: gaurav-nelson/github-action-markdown-link-check@1.0.15
   check-super-linter:
     name: Check syntax (super-linter)
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4.2.1
+      - uses: actions/checkout@v4.2.2
       - name: Run super-linter validation
         uses: github/super-linter@v5.0.0
         env:
@@ -39,7 +39,7 @@ jobs:
     name: Check syntax (tox)
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4.2.1
+      - uses: actions/checkout@v4.2.2
       - name: Install tox
         run: pip install tox
       - name: Run tox lint validation
diff --git a/.github/workflows/on-demand.yml b/.github/workflows/on-demand.yml
index 93da25ab..3e2d7408 100644
--- a/.github/workflows/on-demand.yml
+++ b/.github/workflows/on-demand.yml
@@ -36,7 +36,7 @@ jobs:
       cloud: ${{ steps.filter.outputs.cloud }}
       mirror: ${{ steps.filter.outputs.mirror }}
     steps:
-      - uses: actions/checkout@v4.2.1
+      - uses: actions/checkout@v4.2.2
       - uses: dorny/paths-filter@v3.0.2
         if: ${{ !env.ACT }}
         id: filter
@@ -61,7 +61,7 @@ jobs:
     needs: changes
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4.2.1
+      - uses: actions/checkout@v4.2.2
       - name: Run the sh-checker
         uses: luizm/action-sh-checker@v0.9.0
         env:
@@ -85,7 +85,7 @@ jobs:
     env:
       RELENG_DEBUG: "true"
     steps:
-      - uses: actions/checkout@v4.2.1
+      - uses: actions/checkout@v4.2.2
       - name: Provision a Kubernetes cluster
         env:
           RELENG_K8S_TYPE: ${{ matrix.k8s }}
@@ -110,7 +110,7 @@ jobs:
       VAGRANT_EXPERIMENTAL: disks
       RELENG_DEBUG: "true"
     steps:
-      - uses: actions/checkout@v4.2.1
+      - uses: actions/checkout@v4.2.2
       - name: Cache Vagrant boxes
         uses: actions/cache@v4.1.2
         with:
@@ -167,7 +167,7 @@ jobs:
       releng_kolla_build: "true"
       releng_debug: "true"
     steps:
-      - uses: actions/checkout@v4.2.1
+      - uses: actions/checkout@v4.2.2
       - name: setup the vm folders
         run: |
           ./pre-install.sh "sdc" "/var/local/packages"
diff --git a/.github/workflows/rebase.yml b/.github/workflows/rebase.yml
index b97fd529..cbe839a1 100644
--- a/.github/workflows/rebase.yml
+++ b/.github/workflows/rebase.yml
@@ -20,7 +20,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout the latest code
-        uses: actions/checkout@v4.2.1
+        uses: actions/checkout@v4.2.2
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
           fetch-depth: 0
diff --git a/.github/workflows/spell.yml b/.github/workflows/spell.yml
index 23c7a02a..812e90ac 100644
--- a/.github/workflows/spell.yml
+++ b/.github/workflows/spell.yml
@@ -24,7 +24,7 @@ jobs:
     name: Check spelling (reviewdog)
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4.2.1
+      - uses: actions/checkout@v4.2.2
       - uses: reviewdog/action-misspell@v1.23.0
         with:
           github_token: ${{ secrets.github_token }}
@@ -32,6 +32,6 @@ jobs:
     name: Check spelling (pyspelling)
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4.2.1
+      - uses: actions/checkout@v4.2.2
       - uses: igsekor/pyspelling-any@v1.0.4
         name: Spellcheck
diff --git a/.github/workflows/update.yml b/.github/workflows/update.yml
index 40c7aead..8990a95e 100644
--- a/.github/workflows/update.yml
+++ b/.github/workflows/update.yml
@@ -23,7 +23,7 @@ jobs:
       pull-requests: write  # for technote-space/create-pr-action to create a PR
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4.2.1
+      - uses: actions/checkout@v4.2.2
       - uses: technote-space/create-pr-action@v2.1.4
         with:
           EXECUTE_COMMANDS: |