diff --git a/.github/workflows/confirm-policy-definition-no-built-in-conflicts.yaml b/.github/workflows/confirm-policy-definition-no-built-in-conflicts.yaml
index 511f74f9..3ed88066 100644
--- a/.github/workflows/confirm-policy-definition-no-built-in-conflicts.yaml
+++ b/.github/workflows/confirm-policy-definition-no-built-in-conflicts.yaml
@@ -17,11 +17,11 @@ jobs:
     permissions:
       pull-requests: read
     steps:
-      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: Get changed files
         id: changed_files
-        uses: tj-actions/changed-files@a284dc1814e3fd07f2e34267fc8f81227ed29fb8 # v45.0.8
+        uses: tj-actions/changed-files@9426d40962ed5378910ee2e21d5f8c6fcbf2dd96 # v47.0.6
         with:
           separator: "§"  # we need a character which isn't used within a file name or path
 
diff --git a/.github/workflows/confirm-policy-definition-validity.yaml b/.github/workflows/confirm-policy-definition-validity.yaml
index f34ba5d9..61072840 100644
--- a/.github/workflows/confirm-policy-definition-validity.yaml
+++ b/.github/workflows/confirm-policy-definition-validity.yaml
@@ -13,11 +13,11 @@ jobs:
       pull-requests: read
 
     steps:
-      - uses: actions/checkout@a37ce9120846195fa4ece8f58b268e6043cb2f26 # v3.7.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: Get changed files
         id: changed_files
-        uses: tj-actions/changed-files@a284dc1814e3fd07f2e34267fc8f81227ed29fb8 # v45.0.8
+        uses: tj-actions/changed-files@9426d40962ed5378910ee2e21d5f8c6fcbf2dd96 # v47.0.6
         with:
           separator: "§" # Character not used within a file name or path
           safe_output: true # Enable safe_output for security
diff --git a/.github/workflows/manage-azure-policy-1e59415b.yml b/.github/workflows/manage-azure-policy-1e59415b.yml
index 4b7ea308..49c25c37 100644
--- a/.github/workflows/manage-azure-policy-1e59415b.yml
+++ b/.github/workflows/manage-azure-policy-1e59415b.yml
@@ -19,9 +19,9 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Checkout
-      uses: actions/checkout@0717577d45739eb3c851188b29f50ed6c0b2194e # v2.8.0
+      uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
     - name: Login to Azure
-      uses: azure/login@cb79c773a3cfa27f31f25eb3f677781210c9ce3d # v1.6.1
+      uses: azure/login@7ddb5af1ef8758cf1353cf3b42f940aee27ba21c # v3.0.2
       with:
         creds: ${{secrets.AZURE_CREDENTIALS_1e59415b}}
         allow-no-subscriptions: true