diff --git a/.github/workflows/commit-and-push.yml b/.github/workflows/commit-and-push.yml
index 484338c..50aa23b 100644
--- a/.github/workflows/commit-and-push.yml
+++ b/.github/workflows/commit-and-push.yml
@@ -39,7 +39,7 @@ jobs:
     environment: production
     steps:
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@v4
         with:
           ref: ${{ inputs.branch }}
           persist-credentials: false
diff --git a/.github/workflows/published_release.yml b/.github/workflows/published_release.yml
index e3e1df6..e3119a7 100644
--- a/.github/workflows/published_release.yml
+++ b/.github/workflows/published_release.yml
@@ -136,7 +136,7 @@ jobs:
     needs: process-release-information
     steps:
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@v4
         with:
           fetch-depth: 0
       - name: Download ytt data values file with release information
@@ -178,7 +178,7 @@ jobs:
     needs: process-release-information
     steps:
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@v4
         with:
           fetch-depth: 0
       - name: Download ytt data values file with release information
diff --git a/.github/workflows/test-gh.yml b/.github/workflows/test-gh.yml
index 4f79656..124afa8 100644
--- a/.github/workflows/test-gh.yml
+++ b/.github/workflows/test-gh.yml
@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Checkout
-      uses: actions/checkout@v2
+      uses: actions/checkout@v4
       with:
         fetch-depth: 0
     - name: Install ytt
diff --git a/.github/workflows/trivy-scan.yml b/.github/workflows/trivy-scan.yml
index 14c86f2..a8dc73d 100644
--- a/.github/workflows/trivy-scan.yml
+++ b/.github/workflows/trivy-scan.yml
@@ -94,6 +94,6 @@ jobs:
 
       - name: Upload Trivy scan results to GitHub Security tab
         if: always()
-        uses: github/codeql-action/upload-sarif@v2
+        uses: github/codeql-action/upload-sarif@v3
         with:
           sarif_file: 'trivy-results.sarif'
diff --git a/.github/workflows/update-install-sh.yml b/.github/workflows/update-install-sh.yml
index 3a7d62a..13e8764 100644
--- a/.github/workflows/update-install-sh.yml
+++ b/.github/workflows/update-install-sh.yml
@@ -12,7 +12,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@v4
         with:
           fetch-depth: 0
       - name: Install ytt