diff --git a/.github/workflows/nix.yml b/.github/workflows/nix.yml
index 5bf25fc..cb71751 100644
--- a/.github/workflows/nix.yml
+++ b/.github/workflows/nix.yml
@@ -7,13 +7,13 @@ jobs:
     if: github.event_name != 'pull_request'
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4.2.1
+      - uses: actions/checkout@v4.2.2
       - uses: cachix/install-nix-action@v30
       - run: nix build --no-link path:.#
 
   flake_check:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4.2.1
+      - uses: actions/checkout@v4.2.2
       - uses: cachix/install-nix-action@v30
       - run: nix flake check path:.
diff --git a/.github/workflows/nix_update.yml b/.github/workflows/nix_update.yml
index 82367fe..6bf472e 100644
--- a/.github/workflows/nix_update.yml
+++ b/.github/workflows/nix_update.yml
@@ -11,7 +11,7 @@ jobs:
       contents: write
       pull-requests: write
     steps:
-      - uses: actions/checkout@v4.2.1
+      - uses: actions/checkout@v4.2.2
       - uses: cachix/install-nix-action@v30
       - uses: fregante/setup-git-user@v2
       - run: nix flake update --commit-lock-file