diff --git a/.github/workflows/audit.yml b/.github/workflows/audit.yml
index fb75a421f..74d4249e2 100644
--- a/.github/workflows/audit.yml
+++ b/.github/workflows/audit.yml
@@ -9,7 +9,7 @@ jobs:
     if: ${{ github.repository_owner == 'kube-rs' }}
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3.1.0
       - uses: actions-rs/toolchain@v1
         with:
           toolchain: stable
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 0ea55ddd5..86dc973dd 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -14,7 +14,7 @@ jobs:
         os: [ubuntu-latest, macos-latest, windows-latest]
     runs-on: ${{ matrix.os }}
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3.1.0
       - uses: actions-rs/toolchain@v1
         with:
           override: true
@@ -73,7 +73,7 @@ jobs:
     # Run `cargo check` on our minimum supported Rust version
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@main
+    - uses: actions/checkout@v3.1.0
     - name: Find MSRV
       id: msrv
       run: |
@@ -124,7 +124,7 @@ jobs:
         # Run these tests against older clusters as well
         k8s: [v1.20, latest]
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3.1.0
       - uses: actions-rs/toolchain@v1
         with:
           override: true
@@ -168,7 +168,7 @@ jobs:
     # comile check e2e tests against mk8sv
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3.1.0
 
       - name: Find MK8SV
         id: mk8sv
@@ -237,7 +237,7 @@ jobs:
       matrix:
         tls: [openssl, rustls]
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3.1.0
       - uses: actions/cache@v2
         with:
           path: |
diff --git a/.github/workflows/clippy.yml b/.github/workflows/clippy.yml
index 1ba83084d..efbd45545 100644
--- a/.github/workflows/clippy.yml
+++ b/.github/workflows/clippy.yml
@@ -5,7 +5,7 @@ jobs:
   clippy_nightly:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3.1.0
       - uses: actions-rs/toolchain@v1
         with:
           toolchain: nightly
diff --git a/.github/workflows/coverage.yml b/.github/workflows/coverage.yml
index b028ec98c..660f7fd7b 100644
--- a/.github/workflows/coverage.yml
+++ b/.github/workflows/coverage.yml
@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3.1.0
       - name: Install stable toolchain
         uses: actions-rs/toolchain@v1
         with:
diff --git a/.github/workflows/devcontainer.yml b/.github/workflows/devcontainer.yml
index 5e9cee987..60986d469 100644
--- a/.github/workflows/devcontainer.yml
+++ b/.github/workflows/devcontainer.yml
@@ -14,5 +14,5 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3.1.0
       - run: docker build .devcontainer
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index 0fe89af7e..b25a38dfe 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -16,7 +16,7 @@ jobs:
     continue-on-error: ${{ matrix.checks == 'advisories' }}
 
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3.1.0
       - uses: EmbarkStudios/cargo-deny-action@v1
         with:
           command: check ${{ matrix.checks }}
@@ -25,7 +25,7 @@ jobs:
     name: rustfmt
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3.1.0
       - uses: actions-rs/toolchain@v1.0.7
         with:
           profile: minimal
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 63d286f51..c77c57f88 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -11,7 +11,7 @@ jobs:
     if: ${{ github.repository_owner == 'kube-rs' }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3.1.0
       - name: Generate release info
         run: ./scripts/release-gh.sh
       - name: Release
diff --git a/.github/workflows/rustfmt.yml b/.github/workflows/rustfmt.yml
index f54679026..d2809f203 100644
--- a/.github/workflows/rustfmt.yml
+++ b/.github/workflows/rustfmt.yml
@@ -10,7 +10,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout sources
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3.1.0
 
       - name: Install nightly toolchain with rustfmt available
         uses: actions-rs/toolchain@v1