diff --git a/.github/workflows/autofix.yml b/.github/workflows/autofix.yml
index 3cd3784..e6fdfef 100644
--- a/.github/workflows/autofix.yml
+++ b/.github/workflows/autofix.yml
@@ -12,7 +12,7 @@ jobs:
     if: github.event.pull_request.head.repo.full_name == github.repository
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8  # v6.0.1
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
         with:
           fetch-depth: 0
       - name: CI setup (get-bashed)
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index a1b121a..031f54b 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -8,7 +8,7 @@ jobs:
   lint:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8  # v6.0.1
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
       - name: CI setup (get-bashed)
         run: ./scripts/ci-setup.sh "shellcheck,actionlint,bashate,pre_commit,shdoc"
       - name: Pre-commit
@@ -16,7 +16,7 @@ jobs:
   tests:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8  # v6.0.1
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
       - name: CI setup (get-bashed)
         run: ./scripts/ci-setup.sh "bats"
       - name: Fetch Bats helpers
diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
index a58172e..3801520 100644
--- a/.github/workflows/docs.yml
+++ b/.github/workflows/docs.yml
@@ -16,7 +16,7 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8  # v6.0.1
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
       - name: CI setup (get-bashed)
         run: ./scripts/ci-setup.sh "shdoc"
       - name: Generate docs
diff --git a/.github/workflows/pr-title.yml b/.github/workflows/pr-title.yml
index a5230ce..7aa225c 100644
--- a/.github/workflows/pr-title.yml
+++ b/.github/workflows/pr-title.yml
@@ -7,7 +7,7 @@ jobs:
   lint-title:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8  # v6.0.1
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
       - name: Validate PR title
         env:
           PR_TITLE: ${{ github.event.pull_request.title }}
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 1533083..fa46526 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -7,7 +7,7 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8  # v6.0.1
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
       - name: Package
         run: ./scripts/package.sh dist "${GITHUB_REF_NAME}"
       - name: Upload tarball