diff --git a/.github/workflows/lint.container.yml b/.github/workflows/lint.container.yml
index d95af439b..bdc790680 100644
--- a/.github/workflows/lint.container.yml
+++ b/.github/workflows/lint.container.yml
@@ -12,7 +12,7 @@ jobs:
     name: Hadolint
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - uses: hadolint/hadolint-action@54c9adbab1582c2ef04b2016b760714a4bfde3cf # v3.1.0
         with:
diff --git a/.github/workflows/lint.github-action.yml b/.github/workflows/lint.github-action.yml
index 7cad62849..cea9a0c46 100644
--- a/.github/workflows/lint.github-action.yml
+++ b/.github/workflows/lint.github-action.yml
@@ -15,7 +15,7 @@ jobs:
     permissions:
       security-events: write
     steps:
-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - name: Lint your Github Actions
         run: |
diff --git a/.github/workflows/lint.golang.yml b/.github/workflows/lint.golang.yml
index 7061e3b20..3e68d8777 100644
--- a/.github/workflows/lint.golang.yml
+++ b/.github/workflows/lint.golang.yml
@@ -19,7 +19,7 @@ jobs:
           # renovate: datasource=golang-version
           go-version: '1.22'
           check-latest: true
-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - uses: golangci/golangci-lint-action@aaa42aa0628b4ae2578232a66b541047968fac86 # v6.1.0
         with:
diff --git a/.github/workflows/lint.helm.yml b/.github/workflows/lint.helm.yml
index 5ec8f429b..934adcfed 100644
--- a/.github/workflows/lint.helm.yml
+++ b/.github/workflows/lint.helm.yml
@@ -13,7 +13,7 @@ jobs:
     name: Chart testing
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           fetch-depth: 0
       - uses: azure/setup-helm@5119fcb9089d432beecbf79bb2c7915207344b78 # tag=v3.5
diff --git a/.github/workflows/lint.yaml.yml b/.github/workflows/lint.yaml.yml
index 2f0c5e23a..23f85541f 100644
--- a/.github/workflows/lint.yaml.yml
+++ b/.github/workflows/lint.yaml.yml
@@ -10,7 +10,7 @@ jobs:
     name: YAML lint
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - uses: ibiqlik/action-yamllint@2576378a8e339169678f9939646ee3ee325e845c # tag=v3.1.1
         with:
diff --git a/.github/workflows/release.container.yml b/.github/workflows/release.container.yml
index a635ae783..ffb24f061 100644
--- a/.github/workflows/release.container.yml
+++ b/.github/workflows/release.container.yml
@@ -12,7 +12,7 @@ jobs:
       contents: read
       packages: write
     steps:
-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
       - uses: docker/setup-qemu-action@49b3bc8e6bdd4a60e6116a5414239cba5943d3cf # v3.2.0
       - uses: docker/setup-buildx-action@988b5a0280414f521da01fcc63a27aeeb4b104db # v3.6.1
       - uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3.3.0
diff --git a/.github/workflows/release.goreleaser.yml b/.github/workflows/release.goreleaser.yml
index a3253bd99..aa7641692 100644
--- a/.github/workflows/release.goreleaser.yml
+++ b/.github/workflows/release.goreleaser.yml
@@ -9,7 +9,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           fetch-depth: 0
       - name: Set up Go
diff --git a/.github/workflows/release.helm.yml b/.github/workflows/release.helm.yml
index 4114fe4ad..ab7211467 100644
--- a/.github/workflows/release.helm.yml
+++ b/.github/workflows/release.helm.yml
@@ -11,7 +11,7 @@ jobs:
       contents: write
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           fetch-depth: 0
       - uses: azure/setup-helm@5119fcb9089d432beecbf79bb2c7915207344b78 # tag=v3.5
diff --git a/.github/workflows/security.container.yml b/.github/workflows/security.container.yml
index 7bcf5abe5..7481b2852 100644
--- a/.github/workflows/security.container.yml
+++ b/.github/workflows/security.container.yml
@@ -13,7 +13,7 @@ jobs:
     name: Checkov
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
       - uses: actions/setup-python@39cd14951b08e74b54015e9e001cdefcf80e669f # v5.1.1
         with:
           python-version: '3.8'
diff --git a/.github/workflows/security.helm.yml b/.github/workflows/security.helm.yml
index b51b678e2..48a5fe140 100644
--- a/.github/workflows/security.helm.yml
+++ b/.github/workflows/security.helm.yml
@@ -13,7 +13,7 @@ jobs:
     name: Checkov
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
       - uses: actions/setup-python@39cd14951b08e74b54015e9e001cdefcf80e669f # v5.1.1
         with:
           python-version: '3.8'
diff --git a/.github/workflows/test.golang.yml b/.github/workflows/test.golang.yml
index 05c51b747..002dab943 100644
--- a/.github/workflows/test.golang.yml
+++ b/.github/workflows/test.golang.yml
@@ -21,7 +21,7 @@ jobs:
           # renovate: datasource=golang-version
           go-version: '1.22'
           check-latest: true
-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
       - uses: szenius/set-timezone@ce9c440bc3af4f51b28d7ef7e5c47ee8f26c8dcb # v1.2
         with:
           timezoneLinux: "Europe/Paris"
@@ -39,7 +39,7 @@ jobs:
     runs-on: ubuntu-latest
     needs: [go-test]
     steps:
-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
       - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2
         with:
           name: golang-coverage-report
diff --git a/.github/workflows/test.helm.yml b/.github/workflows/test.helm.yml
index 42a2ac172..d9bd01cba 100644
--- a/.github/workflows/test.helm.yml
+++ b/.github/workflows/test.helm.yml
@@ -15,7 +15,7 @@ jobs:
     name: Chart testing
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           fetch-depth: 0
       - uses: azure/setup-helm@5119fcb9089d432beecbf79bb2c7915207344b78 # tag=v3.5