diff --git a/.github/workflows/benchmarks.yaml b/.github/workflows/benchmarks.yaml
index b259eb027..318fb3fc2 100644
--- a/.github/workflows/benchmarks.yaml
+++ b/.github/workflows/benchmarks.yaml
@@ -86,7 +86,7 @@ jobs:
 
       # We don't need to specify the git-ref here since he are just generating the cli arguments 
       - name: Checkout code
-        uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac
 
       - name: Set up Python
         uses: actions/setup-python@61a6322f88396a6271a6ee3565807d608ecaddd1
@@ -130,7 +130,7 @@ jobs:
       max-parallel: ${{ fromJson(needs.prepare-scripts.outputs.length) }}
     steps:
       - name: Checkout Slab repo
-        uses: actions/checkout@v3
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac
         with:
           repository: zama-ai/slab
           path: slab
diff --git a/.github/workflows/check_github_actions.yaml b/.github/workflows/check_github_actions.yaml
index 8b33f9f9e..871e919f8 100644
--- a/.github/workflows/check_github_actions.yaml
+++ b/.github/workflows/check_github_actions.yaml
@@ -22,7 +22,7 @@ jobs:
         shell: bash
     steps:
       - name: Checkout Code
-        uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac
 
       - name: Install dependencies
         id: install-deps
diff --git a/.github/workflows/check_github_issues.yaml b/.github/workflows/check_github_issues.yaml
index eac705d76..1cbf6079b 100644
--- a/.github/workflows/check_github_issues.yaml
+++ b/.github/workflows/check_github_issues.yaml
@@ -26,7 +26,7 @@ jobs:
         shell: bash
     steps:
       - name: Checkout Code
-        uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac
 
       - name: Install dependencies
         id: install-deps
diff --git a/.github/workflows/ci_timing.yaml b/.github/workflows/ci_timing.yaml
index bf2617080..eb07f87d8 100644
--- a/.github/workflows/ci_timing.yaml
+++ b/.github/workflows/ci_timing.yaml
@@ -26,7 +26,7 @@ jobs:
           echo "::add-mask::${{ secrets.INTERNAL_REPO_URL_FOR_MASK }}"
 
       - name: Checkout code
-        uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/cifar_benchmark.yaml b/.github/workflows/cifar_benchmark.yaml
index 7aaf8c640..61e68a093 100644
--- a/.github/workflows/cifar_benchmark.yaml
+++ b/.github/workflows/cifar_benchmark.yaml
@@ -95,7 +95,7 @@ jobs:
           echo "::add-mask::${{ secrets.INTERNAL_REPO_URL }}"
 
       - name: Checkout code
-        uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac
         with:
           lfs: true
           ref: ${{ github.event.inputs.git-ref }}
diff --git a/.github/workflows/continuous-integration.yaml b/.github/workflows/continuous-integration.yaml
index 98b9c3371..58a3aca48 100644
--- a/.github/workflows/continuous-integration.yaml
+++ b/.github/workflows/continuous-integration.yaml
@@ -111,7 +111,7 @@ jobs:
       instance-type: ${{ steps.set-matrix.outputs.instance-type }}
     steps:
       - name: Checkout code
-        uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac
 
       - name: Set matrix
         id: set-matrix
@@ -228,7 +228,7 @@ jobs:
       matrix: ${{ steps.update-linux-matrix.outputs.linux-matrix }}
     steps:
       - name: Checkout Code
-        uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac
 
       - name: Configure AWS credentials
         uses: aws-actions/configure-aws-credentials@04b98b3f9e85f563fb061be8751a0352327246b0
@@ -371,7 +371,7 @@ jobs:
       # Checkout the code
       # 'fetch-depth' is set to 0 in order to fetch all tags (used for generating the changelog)
       - name: Checkout Code
-        uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac
         with:
           fetch-depth: 0
       
@@ -909,7 +909,7 @@ jobs:
  
       # Checkout the code
       - name: Checkout Code
-        uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac
       
       # Pull the only LFS files needed for regular tests, avoiding to download files stored for 
       # benchmarks and use cases 
@@ -976,7 +976,7 @@ jobs:
     name: Send Slack notification
     runs-on: ubuntu-20.04
     steps:
-      - uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c
+      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac
 
       - name: Prepare whole job status
         if: ${{ always() }}
diff --git a/.github/workflows/prepare_release.yaml b/.github/workflows/prepare_release.yaml
index b82b6a1e0..3bcaa406d 100644
--- a/.github/workflows/prepare_release.yaml
+++ b/.github/workflows/prepare_release.yaml
@@ -46,7 +46,7 @@ jobs:
           fi
 
       - name: Checkout Code
-        uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac
         with:
           ref: ${{ github.ref }}
           token: ${{ secrets.BOT_TOKEN }}
diff --git a/.github/workflows/publish_aws_ami.yaml b/.github/workflows/publish_aws_ami.yaml
index a8064348a..986e3e068 100644
--- a/.github/workflows/publish_aws_ami.yaml
+++ b/.github/workflows/publish_aws_ami.yaml
@@ -24,7 +24,7 @@ jobs:
       # This won't work on automatically triggered based on release
       - name: Checkout Concrete ML Repository
         if: ${{ github.event_name == 'workflow_dispatch' }}
-        uses: actions/checkout@v3
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac
         with:
           ref: ${{ inputs.version || github.ref_name}}
           fetch-depth: 1
@@ -34,14 +34,14 @@ jobs:
       # To use the files and all
       - name: Checkout Concrete ML Repository
         if: ${{ github.event_name == 'workflow_dispatch' }}
-        uses: actions/checkout@v3
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac
         with:
           fetch-depth: 1
           lfs: false
           path: "concrete-ml-latest"
 
       - name: Checkout Slab Repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac
         with:
           repository: "zama-ai/slab"
           path: "slab"
diff --git a/.github/workflows/refresh-notebooks.yaml b/.github/workflows/refresh-notebooks.yaml
index 2be61759e..365236534 100644
--- a/.github/workflows/refresh-notebooks.yaml
+++ b/.github/workflows/refresh-notebooks.yaml
@@ -18,7 +18,7 @@ jobs:
       ec2-instance-id-38: ${{ steps.start-ec2-runner-38.outputs.ec2-instance-id || '' }}
     steps:
       - name: Checkout Code
-        uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac
 
       - name: Configure AWS credentials
         uses: aws-actions/configure-aws-credentials@04b98b3f9e85f563fb061be8751a0352327246b0
@@ -71,7 +71,7 @@ jobs:
           apt update && apt install git git-lfs -y
 
       - name: Checkout Code
-        uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac
         with:
           lfs: true
 
@@ -136,7 +136,7 @@ jobs:
     name: Send Slack notification
     runs-on: ubuntu-20.04
     steps:
-      - uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c
+      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac
 
       - name: Prepare whole job status
         if: ${{ always() }}
diff --git a/.github/workflows/refresh-one-notebook.yaml b/.github/workflows/refresh-one-notebook.yaml
index 2e1cfa60f..c0e9fc6b1 100644
--- a/.github/workflows/refresh-one-notebook.yaml
+++ b/.github/workflows/refresh-one-notebook.yaml
@@ -93,7 +93,7 @@ jobs:
       ec2-instance-id-38: ${{ steps.start-ec2-runner-38.outputs.ec2-instance-id || '' }}
     steps:
       - name: Checkout Code
-        uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac
 
       - name: Configure AWS credentials
         uses: aws-actions/configure-aws-credentials@04b98b3f9e85f563fb061be8751a0352327246b0
@@ -147,7 +147,7 @@ jobs:
           apt update && apt install git git-lfs -y
 
       - name: Checkout Code
-        uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac
         with:
           token: ${{ secrets.BOT_TOKEN }}
           lfs: true
@@ -244,7 +244,7 @@ jobs:
     name: Send Slack notification
     runs-on: ubuntu-20.04
     steps:
-      - uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c
+      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac
 
       - name: Prepare whole job status
         if: ${{ always() }}
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 13291c028..95dfca258 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -52,7 +52,7 @@ jobs:
 
     steps:
       - name: Checkout Code
-        uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac
         with:
           ref: ${{ github.ref }}
           token: ${{ secrets.BOT_TOKEN }}
@@ -127,7 +127,7 @@ jobs:
           apt -y install sudo
 
       - name: Checkout Code
-        uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac
         with:
           ref: ${{ github.ref }}
           token: ${{ secrets.BOT_TOKEN }}
@@ -314,7 +314,7 @@ jobs:
           apt -y install sudo
 
       - name: Checkout Code
-        uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac
         with:
           ref: ${{ github.ref }}
           token: ${{ secrets.BOT_TOKEN }}
@@ -667,7 +667,7 @@ jobs:
       GIT_TAG: ${{ needs.release-checks.outputs.git_tag }}
 
     steps:
-      - uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c
+      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac
 
       - name: Prepare whole job status
         if: ${{ always() }}
diff --git a/.github/workflows/single_benchmark.yaml b/.github/workflows/single_benchmark.yaml
index 16e4f0d5e..11da2c161 100644
--- a/.github/workflows/single_benchmark.yaml
+++ b/.github/workflows/single_benchmark.yaml
@@ -109,7 +109,7 @@ jobs:
 
       # Run with current version
       - name: Checkout CML to run
-        uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac
         with:
           fetch-depth: 1
           lfs: true
@@ -125,7 +125,7 @@ jobs:
       # Install specific version
       # Also pull LFS files (for example, for pulling the pre-trained deep learning model weights)
       - name: Checkout CML to install
-        uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac
         with:
           fetch-depth: 1
           lfs: true
diff --git a/.github/workflows/sync_on_push.yaml b/.github/workflows/sync_on_push.yaml
index 2750b15a2..3a0cd3396 100644
--- a/.github/workflows/sync_on_push.yaml
+++ b/.github/workflows/sync_on_push.yaml
@@ -13,7 +13,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repo
-        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac
         with:
           fetch-depth: 0
       - name: Save repo
diff --git a/.github/workflows/update_licenses.yaml b/.github/workflows/update_licenses.yaml
index 4fccf7e82..8a604a38e 100644
--- a/.github/workflows/update_licenses.yaml
+++ b/.github/workflows/update_licenses.yaml
@@ -30,7 +30,7 @@ jobs:
 
       # Checkout repository
       - name: Checkout Code
-        uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac
         with:
           token: ${{ secrets.BOT_TOKEN }}
 
diff --git a/.github/workflows/weekly-pip-audit.yaml b/.github/workflows/weekly-pip-audit.yaml
index f50f1d827..504339a26 100644
--- a/.github/workflows/weekly-pip-audit.yaml
+++ b/.github/workflows/weekly-pip-audit.yaml
@@ -41,7 +41,7 @@ jobs:
           echo "::add-mask::${{ secrets.INTERNAL_REPO_URL_FOR_MASK }}"
 
       - name: Checkout Code
-        uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac
 
       - name: Set up Python 3.8
         uses: actions/setup-python@61a6322f88396a6271a6ee3565807d608ecaddd1