diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 72f6eb377a9..d508270bcbd 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -35,7 +35,7 @@ jobs:
     steps:
 
     - name: checkout
-      uses: actions/checkout@v2
+      uses: actions/checkout@v3.1.0
 
     - name: install deps
       if: matrix.criu == ''
@@ -105,7 +105,7 @@ jobs:
     steps:
 
     - name: checkout
-      uses: actions/checkout@v2
+      uses: actions/checkout@v3.1.0
 
     - name: install deps
       run: |
diff --git a/.github/workflows/validate.yml b/.github/workflows/validate.yml
index 80a14db7419..9e12f98df98 100644
--- a/.github/workflows/validate.yml
+++ b/.github/workflows/validate.yml
@@ -13,7 +13,7 @@ jobs:
   lint:
     runs-on: ubuntu-20.04
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3.1.0
       - name: install deps
         run: |
           sudo apt -q update
@@ -29,7 +29,7 @@ jobs:
       # Don't ignore C warnings. Note that the output of "go env CGO_CFLAGS" by default is "-g -O2", so we keep them.
       CGO_CFLAGS: -g -O2 -Werror
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3.1.0
       - name: install go
         uses: actions/setup-go@v2
         with:
@@ -40,7 +40,7 @@ jobs:
   codespell:
     runs-on: ubuntu-20.04
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.1.0
     - name: install deps
       # Version of codespell bundled with Ubuntu is way old, so use pip.
       run: pip install codespell
@@ -50,7 +50,7 @@ jobs:
   shfmt:
     runs-on: ubuntu-20.04
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.1.0
     - name: vars
       run: |
         echo "VERSION=3.3.1" >> $GITHUB_ENV
@@ -73,7 +73,7 @@ jobs:
   shellcheck:
     runs-on: ubuntu-20.04
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3.1.0
       - name: vars
         run: |
           echo 'VERSION=v0.7.2' >> $GITHUB_ENV
@@ -96,7 +96,7 @@ jobs:
   deps:
     runs-on: ubuntu-20.04
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3.1.0
     - name: install go
       uses: actions/setup-go@v2
       with:
@@ -136,7 +136,7 @@ jobs:
     runs-on: ubuntu-20.04
     steps:
     - name: checkout
-      uses: actions/checkout@v2
+      uses: actions/checkout@v3.1.0
       with:
         fetch-depth: 0
     - name: install deps
@@ -153,7 +153,7 @@ jobs:
     runs-on: ubuntu-20.04
     steps:
     - name: checkout
-      uses: actions/checkout@v2
+      uses: actions/checkout@v3.1.0
       with:
         fetch-depth: 0
       # We have to run this under Docker as Ubuntu (host) does not support all