diff --git a/.github/workflows/aws-integration.yaml b/.github/workflows/aws-integration.yaml
index f09f1e3048..a165a1689e 100644
--- a/.github/workflows/aws-integration.yaml
+++ b/.github/workflows/aws-integration.yaml
@@ -49,7 +49,7 @@ jobs:
         with:
           go-version: "1.23"
       - name: Check out code into the Go module directory
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
       - name: Cache go module
         uses: actions/cache@v4
         with:
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index ace1145024..91e021ef88 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -27,7 +27,7 @@ jobs:
     name: "Run pre-commit hooks"
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - uses: actions/setup-python@v5
         with:
           python-version: '3.12'
@@ -83,7 +83,7 @@ jobs:
         with:
           go-version: "1.23"
       - name: Check out code into the Go module directory
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
       - name: Cache go module
         uses: actions/cache@v4
         with:
@@ -127,7 +127,7 @@ jobs:
           username: ${{ secrets.QUAY_RHACS_ENG_FM_RW_USERNAME }}
           password: ${{ secrets.QUAY_RHACS_ENG_FM_RW_PASSWORD }}
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           fetch-depth: 0 # Critical for correct image detection in Makefile
       - name: Set up Docker Buildx
diff --git a/.github/workflows/emailsender-central-compatibility.yaml b/.github/workflows/emailsender-central-compatibility.yaml
index f5ed3e151e..e5cba7f652 100644
--- a/.github/workflows/emailsender-central-compatibility.yaml
+++ b/.github/workflows/emailsender-central-compatibility.yaml
@@ -50,12 +50,12 @@ jobs:
           username: ${{ secrets.QUAY_RHACS_ENG_RO_USERNAME }}
           password: ${{ secrets.QUAY_RHACS_ENG_RO_PASSWORD }}
       - name: Checkout this repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           path: acs-fleet-manager
           fetch-depth: 0
       - name: Checkout stackrox/stackrox repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           repository: stackrox/stackrox
           path: stackrox
diff --git a/.github/workflows/multicluster-e2e.yaml b/.github/workflows/multicluster-e2e.yaml
index 72f1fe32bb..f80b8f92c0 100644
--- a/.github/workflows/multicluster-e2e.yaml
+++ b/.github/workflows/multicluster-e2e.yaml
@@ -62,7 +62,7 @@ jobs:
       - name: Install oc
         uses: redhat-actions/oc-installer@v1
       - name: Check out code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
       - name: Set cluster credentials
         run: |
           set -eo pipefail
diff --git a/.github/workflows/openapi_update.yaml b/.github/workflows/openapi_update.yaml
index 3f794bfdea..4c4bd82268 100644
--- a/.github/workflows/openapi_update.yaml
+++ b/.github/workflows/openapi_update.yaml
@@ -19,7 +19,7 @@ jobs:
           - "redhat-developer/app-services-sdk-java"
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - uses: dorny/paths-filter@v3
         id: filter
         with: