diff --git a/.github/workflows/build_and_publish.yaml b/.github/workflows/build_and_publish.yaml
index 92cdc73..7cbe572 100644
--- a/.github/workflows/build_and_publish.yaml
+++ b/.github/workflows/build_and_publish.yaml
@@ -15,7 +15,7 @@ jobs:
     # publish the exact images that were built and tested.
     runs-on: ubuntu-22.04
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v7
     - uses: "opensafely-core/setup-action@v1"
       with:
           install-just: true
diff --git a/.github/workflows/tests.yaml b/.github/workflows/tests.yaml
index 9274f57..d221bd4 100644
--- a/.github/workflows/tests.yaml
+++ b/.github/workflows/tests.yaml
@@ -12,7 +12,7 @@ jobs:
       matrix:
         version: [v1, v2]
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v7
     - uses: "opensafely-core/setup-action@v1"
       with:
           install-just: true
@@ -23,7 +23,7 @@ jobs:
   lint:
     runs-on: ubuntu-22.04
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v7
     - uses: "opensafely-core/setup-action@v1"
       with:
           install-just: true