diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 1a8c3ac..ab8e523 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -13,7 +13,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Verify required baseline files
         shell: bash
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index bb98f3b..e57f05c 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -23,7 +23,7 @@ jobs:
       enabled: ${{ steps.detect.outputs.enabled }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Detect CodeQL languages
         id: detect
@@ -53,7 +53,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Initialize CodeQL
         uses: github/codeql-action/init@v4
diff --git a/.github/workflows/hadolint.yml b/.github/workflows/hadolint.yml
index 657d9ef..bb748ad 100644
--- a/.github/workflows/hadolint.yml
+++ b/.github/workflows/hadolint.yml
@@ -12,7 +12,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Run hadolint when Dockerfiles exist
         shell: bash
diff --git a/.github/workflows/permissions.yml b/.github/workflows/permissions.yml
index b26f425..11934d3 100644
--- a/.github/workflows/permissions.yml
+++ b/.github/workflows/permissions.yml
@@ -17,7 +17,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Validate executable service scripts
         shell: bash
diff --git a/.github/workflows/security-policy-sync.yml b/.github/workflows/security-policy-sync.yml
index 78cabac..eb3a41a 100644
--- a/.github/workflows/security-policy-sync.yml
+++ b/.github/workflows/security-policy-sync.yml
@@ -17,7 +17,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Validate security documentation links
         shell: bash
diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml
index a646e42..9f14fcb 100644
--- a/.github/workflows/security.yml
+++ b/.github/workflows/security.yml
@@ -15,7 +15,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Trivy fs SARIF
         uses: aquasecurity/trivy-action@v0.36.0
@@ -39,7 +39,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0