diff --git a/.github/workflows/docker.yaml b/.github/workflows/docker.yaml
index f6d6164c..e514d182 100644
--- a/.github/workflows/docker.yaml
+++ b/.github/workflows/docker.yaml
@@ -44,7 +44,7 @@ jobs:
                   echo "kimai_version=$version" >> $GITHUB_ENV
 
             - name: Checkout code
-              uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+              uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
               with:
                   ref: ${{ env.kimai_version }}
                   persist-credentials: false
diff --git a/.github/workflows/frontend.yaml b/.github/workflows/frontend.yaml
index 4ad9ad6f..33abeb3b 100644
--- a/.github/workflows/frontend.yaml
+++ b/.github/workflows/frontend.yaml
@@ -17,7 +17,7 @@ jobs:
         name: Frontend verification
         steps:
             - name: Clone Kimai
-              uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+              uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
               with:
                   persist-credentials: false
 
diff --git a/.github/workflows/linting.yaml b/.github/workflows/linting.yaml
index 721fa19d..333b343e 100644
--- a/.github/workflows/linting.yaml
+++ b/.github/workflows/linting.yaml
@@ -24,7 +24,7 @@ jobs:
         steps:
 
             -   name: Clone Kimai
-                uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+                uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
                 with:
                     persist-credentials: false
 
diff --git a/.github/workflows/testing.yaml b/.github/workflows/testing.yaml
index c5b060fa..61f5f23c 100644
--- a/.github/workflows/testing.yaml
+++ b/.github/workflows/testing.yaml
@@ -34,7 +34,7 @@ jobs:
         steps:
 
             -   name: Clone Kimai
-                uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+                uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
                 with:
                     persist-credentials: false
 
diff --git a/.github/workflows/zizmor.yaml b/.github/workflows/zizmor.yaml
index ad70c899..b99a9e24 100644
--- a/.github/workflows/zizmor.yaml
+++ b/.github/workflows/zizmor.yaml
@@ -20,7 +20,7 @@ jobs:
             security-events: write # Required for upload-sarif (used by zizmor-action) to upload SARIF files.
         steps:
             - name: Checkout repository
-              uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+              uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
               with:
                   persist-credentials: false