diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index adb1d506b442d..2556fa5dd087a 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -24,7 +24,7 @@ jobs:
           test-bot: false
 
       - name: Check out Pull Request
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3.1.0
         with:
           fetch-depth: 0
           persist-credentials: false
@@ -50,7 +50,7 @@ jobs:
           test-bot: false
 
       - name: Check out Pull Request
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3.1.0
         with:
           fetch-depth: 0
           persist-credentials: false
diff --git a/.github/workflows/sync-labels.yml b/.github/workflows/sync-labels.yml
index 240d3ef919e4c..a9b88e7379b9d 100644
--- a/.github/workflows/sync-labels.yml
+++ b/.github/workflows/sync-labels.yml
@@ -7,7 +7,7 @@ jobs:
     if: github.repository == 'Homebrew/homebrew-cask'
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3.1.0
         with:
           persist-credentials: false
 
diff --git a/.github/workflows/sync-templates-and-ci-config.yml b/.github/workflows/sync-templates-and-ci-config.yml
index 2bce1eae9b369..eff0acfbd70a7 100644
--- a/.github/workflows/sync-templates-and-ci-config.yml
+++ b/.github/workflows/sync-templates-and-ci-config.yml
@@ -22,12 +22,12 @@ jobs:
           - Homebrew/homebrew-cask-versions
     steps:
       - name: Clone main repository
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3.1.0
         with:
           persist-credentials: false
 
       - name: Clone secondary repository
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3.1.0
         with:
           repository: ${{ matrix.repo }}
           path: vendor/${{ matrix.repo }}