diff --git a/.github/workflows/_release.yaml b/.github/workflows/_release.yaml
index 2a96502..c82b991 100644
--- a/.github/workflows/_release.yaml
+++ b/.github/workflows/_release.yaml
@@ -13,7 +13,7 @@ jobs:
         with:
           app-id: ${{ vars.APP_ID }}
           private-key: ${{ secrets.PRIVATE_KEY }}
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           token: ${{ steps.app-token.outputs.token }}
       - uses: Songmu/tagpr@9bbb945b2fb025126186661e27d55485e3fc6df6 # v1.18.3
diff --git a/.github/workflows/create-draft.yaml b/.github/workflows/create-draft.yaml
index c8634e1..6da1eb4 100644
--- a/.github/workflows/create-draft.yaml
+++ b/.github/workflows/create-draft.yaml
@@ -27,7 +27,7 @@ jobs:
     env:
       BLOGSYNC_PASSWORD: ${{ secrets.OWNER_API_KEY }}
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           fetch-depth: 0
       - name: setup
diff --git a/.github/workflows/initialize.yaml b/.github/workflows/initialize.yaml
index b6a688b..ce633ec 100644
--- a/.github/workflows/initialize.yaml
+++ b/.github/workflows/initialize.yaml
@@ -23,7 +23,7 @@ jobs:
       BLOGSYNC_PASSWORD: ${{ secrets.OWNER_API_KEY }}
     runs-on: ${{ inputs.runner }}
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           fetch-depth: 0
       - name: setup
diff --git a/.github/workflows/pull-draft.yaml b/.github/workflows/pull-draft.yaml
index fc95475..4ac2939 100644
--- a/.github/workflows/pull-draft.yaml
+++ b/.github/workflows/pull-draft.yaml
@@ -27,7 +27,7 @@ jobs:
       BLOGSYNC_PASSWORD: ${{ secrets.OWNER_API_KEY }}
       ENTRY_TITLE: ${{ inputs.title }}
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           fetch-depth: 0
       - name: setup
diff --git a/.github/workflows/pull.yaml b/.github/workflows/pull.yaml
index 9a018ff..6fb52ba 100644
--- a/.github/workflows/pull.yaml
+++ b/.github/workflows/pull.yaml
@@ -20,7 +20,7 @@ jobs:
     env:
       BLOGSYNC_PASSWORD: ${{ secrets.OWNER_API_KEY }}
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           fetch-depth: 0
       - name: setup
diff --git a/.github/workflows/push-draft.yaml b/.github/workflows/push-draft.yaml
index 75127ae..36c52e2 100644
--- a/.github/workflows/push-draft.yaml
+++ b/.github/workflows/push-draft.yaml
@@ -25,7 +25,7 @@ jobs:
     env:
       BLOGSYNC_PASSWORD: ${{ secrets.OWNER_API_KEY }}
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           ref: ${{ needs.upload-images.result == 'success' && needs.upload-images.outputs.revision || '' }}
           fetch-depth: 0
diff --git a/.github/workflows/push-when-publishing-from-draft.yaml b/.github/workflows/push-when-publishing-from-draft.yaml
index 61ede07..b5c686b 100644
--- a/.github/workflows/push-when-publishing-from-draft.yaml
+++ b/.github/workflows/push-when-publishing-from-draft.yaml
@@ -23,7 +23,7 @@ jobs:
     env:
       BLOGSYNC_PASSWORD: ${{ secrets.OWNER_API_KEY }}
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           fetch-depth: 0
       - name: setup
diff --git a/.github/workflows/push.yaml b/.github/workflows/push.yaml
index 56e8ea4..d15399f 100644
--- a/.github/workflows/push.yaml
+++ b/.github/workflows/push.yaml
@@ -23,7 +23,7 @@ jobs:
     env:
       BLOGSYNC_PASSWORD: ${{ secrets.OWNER_API_KEY }}
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           fetch-depth: 0
       - name: setup
diff --git a/.github/workflows/upload-images.yaml b/.github/workflows/upload-images.yaml
index 0c88232..1e057bd 100644
--- a/.github/workflows/upload-images.yaml
+++ b/.github/workflows/upload-images.yaml
@@ -20,7 +20,7 @@ jobs:
     outputs:
       revision: ${{ steps.commit-and-push.outputs.revision }}
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           ref: ${{ github.event.pull_request.head.ref }}
       - name: list changed entries