diff --git a/.github/workflows/build-openstack-must-gather.yaml b/.github/workflows/build-openstack-must-gather.yaml
index 7d05f4ee..8a791dc3 100644
--- a/.github/workflows/build-openstack-must-gather.yaml
+++ b/.github/workflows/build-openstack-must-gather.yaml
@@ -29,7 +29,7 @@ jobs:
     if: needs.check-secrets.outputs.have-secrets == 'true'
 
     steps:
-    - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+    - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
 
     - name: Set latest tag for non main branch
       if: github.ref_name != 'main'
diff --git a/.github/workflows/sanity-check.yaml b/.github/workflows/sanity-check.yaml
index 064f5580..f3f1551a 100644
--- a/.github/workflows/sanity-check.yaml
+++ b/.github/workflows/sanity-check.yaml
@@ -10,9 +10,9 @@ jobs:
       matrix:
         python-version: ["3.9", "3.11"]
     steps:
-      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
       - name: Setup python
-        uses: actions/setup-python@7f4fc3e22c37d6ff65e88745f38bd3157c663f7c # v4
+        uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6
         with:
           python-version: ${{ matrix.python-version }}
       - name: Install dependencies