diff --git a/.github/actions/collect-changes/action.yaml b/.github/actions/collect-changes/action.yaml
index b1615e45e29..e55eabbaaf5 100644
--- a/.github/actions/collect-changes/action.yaml
+++ b/.github/actions/collect-changes/action.yaml
@@ -22,7 +22,7 @@ runs:
   using: "composite"
   steps:
     - name: Collect changed files
-      uses: dorny/paths-filter@v2
+      uses: dorny/paths-filter@ebc4d7e9ebcb0b1eb21480bb8f43113e996ac77a # v3
       id: filter
       with:
         list-files: shell
diff --git a/.github/workflows/catalog-template-test.yaml b/.github/workflows/catalog-template-test.yaml
index d333bdaa2ac..8e7fffafd57 100644
--- a/.github/workflows/catalog-template-test.yaml
+++ b/.github/workflows/catalog-template-test.yaml
@@ -22,7 +22,7 @@ jobs:
       - name: Setting repo parent dir as safe safe.directory
         run: git config --global --add safe.directory "$GITHUB_WORKSPACE"
         
-      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
         name: Checkout-validate
         with:
           fetch-depth: 1
@@ -47,7 +47,7 @@ jobs:
           ./charttool deps ${PWD}/charts
           
       - name: Checkout
-        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
         with:
           repository: truecharts/catalog
           path: catalog
diff --git a/.github/workflows/catalog-test.yaml b/.github/workflows/catalog-test.yaml
index 493365e5007..40b50f07020 100644
--- a/.github/workflows/catalog-test.yaml
+++ b/.github/workflows/catalog-test.yaml
@@ -27,7 +27,7 @@ jobs:
       - name: Setting repo parent dir as safe safe.directory
         run: git config --global --add safe.directory "$GITHUB_WORKSPACE"
         
-      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
         name: Checkout-validate
         with:
           fetch-depth: 1