diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 78c683b..03a16da 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -290,7 +290,7 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - name: Checkout Code
-        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # ratchet:actions/checkout@v6.0.1
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           # TODO: Configure fetch-depth?
           fetch-depth: 2
diff --git a/.github/workflows/claude_mention.yaml b/.github/workflows/claude_mention.yaml
index 3818df3..a083980 100644
--- a/.github/workflows/claude_mention.yaml
+++ b/.github/workflows/claude_mention.yaml
@@ -39,7 +39,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # ratchet:actions/checkout@v6.0.1
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           fetch-depth: 1
       - name: Run Claude Code
diff --git a/.github/workflows/claude_review.yaml b/.github/workflows/claude_review.yaml
index ef457c2..5b70e34 100644
--- a/.github/workflows/claude_review.yaml
+++ b/.github/workflows/claude_review.yaml
@@ -25,7 +25,7 @@ jobs:
       (github.event_name == 'pull_request' && !github.event.pull_request.draft && !contains(github.event.pull_request.labels.*.name, 'NOCLAUDE') && !contains(github.event.pull_request.user.login, 'uptick-renovate'))
     steps:
       - name: Checkout repository
-        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # ratchet:actions/checkout@v6.0.1
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/claude_review_2.yaml b/.github/workflows/claude_review_2.yaml
index 2d83d22..6c7b8ae 100644
--- a/.github/workflows/claude_review_2.yaml
+++ b/.github/workflows/claude_review_2.yaml
@@ -24,7 +24,7 @@ jobs:
       (github.event_name == 'pull_request' && !github.event.pull_request.draft && !contains(github.event.pull_request.labels.*.name, 'NOCLAUDE'))
     steps:
       - name: Checkout repository
-        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # ratchet:actions/checkout@v6.0.1
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/test-claude_review.yaml b/.github/workflows/test-claude_review.yaml
index f94f8d0..5154ca9 100644
--- a/.github/workflows/test-claude_review.yaml
+++ b/.github/workflows/test-claude_review.yaml
@@ -21,7 +21,7 @@ jobs:
       (github.event_name == 'pull_request' && !github.event.pull_request.draft && !contains(github.event.pull_request.labels.*.name, 'NOCLAUDE'))
     steps:
       - name: Checkout repository
-        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # ratchet:actions/checkout@v6.0.1
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           fetch-depth: 0