diff --git a/.github/workflows/ai-fuzzing.yml b/.github/workflows/ai-fuzzing.yml
index 3c490be..5c34dee 100644
--- a/.github/workflows/ai-fuzzing.yml
+++ b/.github/workflows/ai-fuzzing.yml
@@ -18,7 +18,7 @@ jobs:
   ai-fuzz:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - uses: actions/setup-python@v5
         with:
diff --git a/.github/workflows/ai-review.yml b/.github/workflows/ai-review.yml
index cdfbf67..2fa2779 100644
--- a/.github/workflows/ai-review.yml
+++ b/.github/workflows/ai-review.yml
@@ -22,7 +22,7 @@ jobs:
   ai-review:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index aa5becc..76c2f55 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -17,7 +17,7 @@ jobs:
       contents: read
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - name: Initialize CodeQL
         uses: github/codeql-action/init@v3
diff --git a/.github/workflows/container-security.yml b/.github/workflows/container-security.yml
index 701554c..9622d4b 100644
--- a/.github/workflows/container-security.yml
+++ b/.github/workflows/container-security.yml
@@ -10,7 +10,7 @@ jobs:
   trivy:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - name: Build image
         run: docker build -t app:${{ github.sha }} .
diff --git a/.github/workflows/dast.yml b/.github/workflows/dast.yml
index a6964f7..be79598 100644
--- a/.github/workflows/dast.yml
+++ b/.github/workflows/dast.yml
@@ -8,7 +8,7 @@ jobs:
   zap:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - name: Start app
         run: |
diff --git a/.github/workflows/iac-security.yml b/.github/workflows/iac-security.yml
index 4918f6b..c16a068 100644
--- a/.github/workflows/iac-security.yml
+++ b/.github/workflows/iac-security.yml
@@ -9,7 +9,7 @@ jobs:
   checkov:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - name: Checkov — Dockerfile + Kubernetes
         uses: bridgecrewio/checkov-action@master
diff --git a/.github/workflows/oss-policy.yml b/.github/workflows/oss-policy.yml
index be7c0bf..25186bb 100644
--- a/.github/workflows/oss-policy.yml
+++ b/.github/workflows/oss-policy.yml
@@ -9,7 +9,7 @@ jobs:
   oss-check:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - name: Generate SBOM
         uses: anchore/sbom-action@v0
diff --git a/.github/workflows/sast.yml b/.github/workflows/sast.yml
index 17a412d..dc8d09e 100644
--- a/.github/workflows/sast.yml
+++ b/.github/workflows/sast.yml
@@ -8,7 +8,7 @@ jobs:
   semgrep:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - name: Semgrep — OWASP Top 10
         uses: semgrep/semgrep-action@v1
diff --git a/.github/workflows/secret-detection.yml b/.github/workflows/secret-detection.yml
index 3c18b5b..66f4b03 100644
--- a/.github/workflows/secret-detection.yml
+++ b/.github/workflows/secret-detection.yml
@@ -10,7 +10,7 @@ jobs:
   gitleaks:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0