diff --git a/.github/workflows/benchmark-action.yaml b/.github/workflows/benchmark-action.yaml
index afd143d08..1fa00aba1 100644
--- a/.github/workflows/benchmark-action.yaml
+++ b/.github/workflows/benchmark-action.yaml
@@ -21,7 +21,7 @@ jobs:
     name: Performance regression check
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3.5.2
+      - uses: actions/checkout@v4.0.0
       - uses: actions/setup-go@v4 # default version of go is 1.10
         with:
           go-version: 1.21.1
diff --git a/.github/workflows/dependency-updater.yml b/.github/workflows/dependency-updater.yml
index 237b00953..b51c25b9d 100644
--- a/.github/workflows/dependency-updater.yml
+++ b/.github/workflows/dependency-updater.yml
@@ -10,7 +10,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v3.5.2
+        uses: actions/checkout@v4.0.0
         with:
           fetch-depth: 0
       - name: Set up Go 1.x
diff --git a/.github/workflows/golangci-lint.yml b/.github/workflows/golangci-lint.yml
index 3fd626e72..5605cc958 100644
--- a/.github/workflows/golangci-lint.yml
+++ b/.github/workflows/golangci-lint.yml
@@ -22,7 +22,7 @@ jobs:
         uses: actions/setup-go@v4
         with:
           go-version: 1.21.1
-      - uses: actions/checkout@v3.5.2
+      - uses: actions/checkout@v4.0.0
         with:
           fetch-depth: '0'
       - name: golangci-lint
diff --git a/.github/workflows/kind-action.yml b/.github/workflows/kind-action.yml
index 056acf3d0..80020926a 100644
--- a/.github/workflows/kind-action.yml
+++ b/.github/workflows/kind-action.yml
@@ -22,7 +22,7 @@ jobs:
         with:
           kubectl_version: v1.25.0
           cluster_name: kinder
-      - uses: actions/checkout@v3.5.2
+      - uses: actions/checkout@v4.0.0
         with:
           fetch-depth: 0
       - uses: actions/setup-go@v4 # default version of go is 1.10
diff --git a/.github/workflows/misspell.yml b/.github/workflows/misspell.yml
index 57b26e3d0..d6e5bc7e8 100644
--- a/.github/workflows/misspell.yml
+++ b/.github/workflows/misspell.yml
@@ -6,7 +6,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check out code.
-        uses: actions/checkout@v3.5.2
+        uses: actions/checkout@v4.0.0
       - name: misspell
         uses: reviewdog/action-misspell@ccb0441a34ac2a3ece1206c63d7b6dd757ffde4d # v1.1.0
         with:
diff --git a/.github/workflows/release-process.yml b/.github/workflows/release-process.yml
index 86c3a71e6..591a1f7a0 100644
--- a/.github/workflows/release-process.yml
+++ b/.github/workflows/release-process.yml
@@ -12,7 +12,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check out code
-        uses: actions/checkout@v3.5.2
+        uses: actions/checkout@v4.0.0
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/test-gh.yml b/.github/workflows/test-gh.yml
index ee325f365..38425f58c 100644
--- a/.github/workflows/test-gh.yml
+++ b/.github/workflows/test-gh.yml
@@ -28,7 +28,7 @@ jobs:
       with:
         go-version: 1.21.1
     - name: Check out code
-      uses: actions/checkout@v3.5.2
+      uses: actions/checkout@v4.0.0
       with:
           fetch-depth: 0
     - name: Install Carvel Tools
diff --git a/.github/workflows/test-kctrl-gh.yml b/.github/workflows/test-kctrl-gh.yml
index 2d25bf4b9..6d11c3af5 100644
--- a/.github/workflows/test-kctrl-gh.yml
+++ b/.github/workflows/test-kctrl-gh.yml
@@ -26,7 +26,7 @@ jobs:
       with:
         go-version: 1.21.1
     - name: Check out code
-      uses: actions/checkout@v3.5.2
+      uses: actions/checkout@v4.0.0
       with:
         fetch-depth: 0
     - name: Install Carvel Tools
diff --git a/.github/workflows/trivy-scan.yml b/.github/workflows/trivy-scan.yml
index 5073761e2..20c8b2cc9 100644
--- a/.github/workflows/trivy-scan.yml
+++ b/.github/workflows/trivy-scan.yml
@@ -64,7 +64,7 @@ jobs:
       security-events: write
     steps:
       - name: Checkout
-        uses: actions/checkout@v3.5.2
+        uses: actions/checkout@v4.0.0
         with:
           fetch-depth: 0
       - name: Set up Go 1.x
diff --git a/.github/workflows/upgrade-testing.yml b/.github/workflows/upgrade-testing.yml
index 47c9b4168..60448cdf4 100644
--- a/.github/workflows/upgrade-testing.yml
+++ b/.github/workflows/upgrade-testing.yml
@@ -28,7 +28,7 @@ jobs:
         with:
           go-version: 1.21.1
       - name: Check out code
-        uses: actions/checkout@v3.5.2
+        uses: actions/checkout@v4.0.0
       - name: Install Carvel Tools
         run: ./hack/install-deps.sh
       - name: Run Upgrade Test