diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index c37a773..3bd4c02 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: "Clone Repository"
-      uses: actions/checkout@v2
+      uses: actions/checkout@v3
     - name: "Run pylint"
       uses: osbuild/koji-osbuild/test@main
       with:
@@ -26,7 +26,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: "Clone Repository"
-      uses: actions/checkout@v2
+      uses: actions/checkout@v3
     - name: "Run unit tests"
       uses: osbuild/koji-osbuild/test@main
       with:
@@ -40,7 +40,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: "Clone Repository"
-      uses: actions/checkout@v2
+      uses: actions/checkout@v3
     - name: "Run ShellCheck"
       uses: ludeeus/action-shellcheck@1.1.0
       with:
@@ -50,7 +50,7 @@ jobs:
     name: "Spell check"
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
       - uses: codespell-project/actions-codespell@master
         with:
           skip: ./.git,build
diff --git a/.github/workflows/coverity_scan.yml b/.github/workflows/coverity_scan.yml
index 3470419..612455a 100644
--- a/.github/workflows/coverity_scan.yml
+++ b/.github/workflows/coverity_scan.yml
@@ -10,7 +10,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Clone repository
-        uses: actions/checkout@v2.3.4
+        uses: actions/checkout@v3
 
       # https://scan.coverity.com/projects/osbuild-osbuild-composer
       - name: Run coverity scan script
diff --git a/.github/workflows/trigger-gitlab.yml b/.github/workflows/trigger-gitlab.yml
index c3b8803..3333685 100644
--- a/.github/workflows/trigger-gitlab.yml
+++ b/.github/workflows/trigger-gitlab.yml
@@ -40,7 +40,7 @@ jobs:
       SCHUTZBOT_SSH_KEY: ${{ secrets.SCHUTZBOT_SSH_KEY }}
     steps:
       - name: Clone repository
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3
         with:
           # otherwise we are testing target branch instead of the PR branch (see pull_request_target trigger)
           ref: ${{ github.event.pull_request.head.sha }}