diff --git a/.github/workflows/Build.yml b/.github/workflows/Build.yml
index 3fd723e..9f40051 100644
--- a/.github/workflows/Build.yml
+++ b/.github/workflows/Build.yml
@@ -194,7 +194,7 @@ jobs:
         env: ${{ fromJson(needs.setup.outputs.target) }}
     env: ${{ matrix.env }}
     steps:
-      - uses: actions/checkout@v6.0.2
+      - uses: actions/checkout@v7.0.0
       - name: Login to DockerHub
         if: ${{ github.repository_owner == 'rust-cross' && github.event_name != 'pull_request' }}
         uses: docker/login-action@v4
diff --git a/.github/workflows/scorecards.yml b/.github/workflows/scorecards.yml
index ad6b1e1..a04b422 100644
--- a/.github/workflows/scorecards.yml
+++ b/.github/workflows/scorecards.yml
@@ -32,7 +32,7 @@ jobs:
 
     steps:
       - name: "Checkout code"
-        uses: actions/checkout@0c366fd6a839edf440554fa01a7085ccba70ac98 # v4.1.0
+        uses: actions/checkout@4f1f4aec02e41874fa0262ea8ff5172d7978ad1e # v4.1.0
         with:
           persist-credentials: false