diff --git a/.github/workflows/build-man.yml b/.github/workflows/build-man.yml
index 2f2d998a..883212b7 100644
--- a/.github/workflows/build-man.yml
+++ b/.github/workflows/build-man.yml
@@ -20,6 +20,6 @@ jobs:
   build-man:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v4
     - name: Checks that manual generation works
       run: make build-man
diff --git a/.github/workflows/github-pages.yml b/.github/workflows/github-pages.yml
index 4c7f1106..157cdcc1 100644
--- a/.github/workflows/github-pages.yml
+++ b/.github/workflows/github-pages.yml
@@ -18,7 +18,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v4
 
     - name: Build docs
       run: make build-docs
diff --git a/.github/workflows/release-ci.yml b/.github/workflows/release-ci.yml
index 32da1c7b..c3cc16ad 100644
--- a/.github/workflows/release-ci.yml
+++ b/.github/workflows/release-ci.yml
@@ -45,7 +45,7 @@ jobs:
           #  release-env: alpine    # temp removal of alpine releases for #881
 
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v4
     - name: Run checks
       run: |
         SECRETS_RELEASE_ENV="${{ matrix.release-env }}" \
@@ -62,7 +62,7 @@ jobs:
           - deb
           - rpm
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v4
     - name: Run dry run of the release process
       run: |
         SECRETS_RELEASE_TYPE="${{ matrix.release-type }}" \
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 4bc3ec1e..17539a54 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -23,7 +23,7 @@ jobs:
           # - deb
           # - rpm
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v4
     - name: Run checks
       run: SECRETS_RELEASE_TYPE="${{ matrix.release-type }}" make release
       env:
@@ -33,7 +33,7 @@ jobs:
   #   runs-on: ubuntu-latest
   #   needs: ['release-packages']
   #   steps:
-  #   - uses: actions/checkout@v3
+  #   - uses: actions/checkout@v4
   #   - run: make changelog
   #     env:
   #       GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 5a9abbda..92716de7 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -19,7 +19,7 @@ jobs:
   lint:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v4
     - name: Shellcheck and Hadolint
       run: make lint
 
@@ -37,7 +37,7 @@ jobs:
           - rocky
           - ubuntu
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v4
     - name: Run checks
       run: SECRETS_DOCKER_ENV="${{ matrix.docker-env }}" make docker-ci
 
@@ -47,7 +47,7 @@ jobs:
       matrix:
         test-verbose: [0, 1]
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v4
     - name: Install deps
       run: brew install gawk gnupg
     - name: Run checks
@@ -56,7 +56,7 @@ jobs:
   freebsd-ci:
     runs-on: macos-10.15
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v4
     - name: Run checks
       id: test
       uses: vmactions/freebsd-vm@v0.3.0
@@ -76,6 +76,6 @@ jobs:
         update: 'true'
         additional-packages: gnupg make man git gawk file
     - run: git config --global core.autocrlf input
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v4
     - shell: wsl-bash {0}
       run: make test