diff --git a/cumulus/.github/workflows/docs.yml b/cumulus/.github/workflows/docs.yml
index c67f5bb97a..ba7739f25c 100644
--- a/cumulus/.github/workflows/docs.yml
+++ b/cumulus/.github/workflows/docs.yml
@@ -17,7 +17,7 @@ jobs:
           protoc --version
 
       - name: Checkout repository
-        uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2
+        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
 
       - name: Rust versions
         run:  rustup show
diff --git a/cumulus/.github/workflows/fmt-check.yml b/cumulus/.github/workflows/fmt-check.yml
index 498e42527e..7571c51116 100644
--- a/cumulus/.github/workflows/fmt-check.yml
+++ b/cumulus/.github/workflows/fmt-check.yml
@@ -16,7 +16,7 @@ jobs:
     container:
       image: paritytech/ci-linux:production
     steps:
-      - uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2
+      - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
 
       - name: Cargo fmt
         run: cargo +nightly fmt --all -- --check
diff --git a/cumulus/.github/workflows/release-01_branch-check.yml b/cumulus/.github/workflows/release-01_branch-check.yml
index c6237b40ce..afcd4580f1 100644
--- a/cumulus/.github/workflows/release-01_branch-check.yml
+++ b/cumulus/.github/workflows/release-01_branch-check.yml
@@ -13,7 +13,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout sources
-        uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2
+        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
         with:
           fetch-depth: 0
 
diff --git a/cumulus/.github/workflows/release-10_rc-automation.yml b/cumulus/.github/workflows/release-10_rc-automation.yml
index 9b6e156a2c..377d383010 100644
--- a/cumulus/.github/workflows/release-10_rc-automation.yml
+++ b/cumulus/.github/workflows/release-10_rc-automation.yml
@@ -17,7 +17,7 @@ jobs:
             pre-releases: true
     steps:
       - name: Checkout sources
-        uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2
+        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
         with:
           fetch-depth: 0
       - id: compute_tag
diff --git a/cumulus/.github/workflows/release-20_extrinsic-ordering-check-from-bin.yml b/cumulus/.github/workflows/release-20_extrinsic-ordering-check-from-bin.yml
index 2f4552b928..f821e39dd3 100644
--- a/cumulus/.github/workflows/release-20_extrinsic-ordering-check-from-bin.yml
+++ b/cumulus/.github/workflows/release-20_extrinsic-ordering-check-from-bin.yml
@@ -29,7 +29,7 @@ jobs:
       REF_URL: ${{github.event.inputs.reference_url}}
 
     steps:    
-      - uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2
+      - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
 
       - name: Fetch binary
         run: |
diff --git a/cumulus/.github/workflows/release-21_extrinsic-ordering-check-from-two.yml b/cumulus/.github/workflows/release-21_extrinsic-ordering-check-from-two.yml
index 79fa11b3f9..93c0050ff6 100644
--- a/cumulus/.github/workflows/release-21_extrinsic-ordering-check-from-two.yml
+++ b/cumulus/.github/workflows/release-21_extrinsic-ordering-check-from-two.yml
@@ -42,7 +42,7 @@ jobs:
             relay: polkadot-local
 
     steps:
-      - uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2
+      - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
 
       - name: Create tmp dir
         run: |
diff --git a/cumulus/.github/workflows/release-30_create-draft.yml b/cumulus/.github/workflows/release-30_create-draft.yml
index 2080a052da..8ad63ff46c 100644
--- a/cumulus/.github/workflows/release-30_create-draft.yml
+++ b/cumulus/.github/workflows/release-30_create-draft.yml
@@ -68,7 +68,7 @@ jobs:
             runtime: rococo-parachain
     steps:
       - name: Checkout sources
-        uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2
+        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
         with:
           ref: ${{ github.event.inputs.ref2 }}
 
@@ -120,7 +120,7 @@ jobs:
       asset_upload_url: ${{ steps.create-release.outputs.upload_url }}
     steps:
       - name: Checkout sources
-        uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2
+        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
         with:
           fetch-depth: 0
           path: cumulus
@@ -246,7 +246,7 @@ jobs:
             runtime: rococo-parachain
     steps:
       - name: Checkout sources
-        uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2
+        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
         with:
           ref: ${{ github.event.inputs.ref2 }}
 
diff --git a/cumulus/.github/workflows/release-50_docker-manual.yml b/cumulus/.github/workflows/release-50_docker-manual.yml
index 10eaf07dad..e48d7c8faa 100644
--- a/cumulus/.github/workflows/release-50_docker-manual.yml
+++ b/cumulus/.github/workflows/release-50_docker-manual.yml
@@ -25,7 +25,7 @@ jobs:
 
     steps:
       - name: Checkout sources
-        uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2
+        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
         with:
           ref: ${{ github.event.release.tag_name }}
 
diff --git a/cumulus/.github/workflows/release-50_docker.yml b/cumulus/.github/workflows/release-50_docker.yml
index 42d1747716..9a1db1a04a 100644
--- a/cumulus/.github/workflows/release-50_docker.yml
+++ b/cumulus/.github/workflows/release-50_docker.yml
@@ -20,7 +20,7 @@ jobs:
 
     steps:
       - name: Checkout sources
-        uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2
+        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
         with:
           ref: ${{ github.event.release.tag_name }}
 
diff --git a/cumulus/.github/workflows/srtool.yml b/cumulus/.github/workflows/srtool.yml
index b717a12ce8..6941a79a01 100644
--- a/cumulus/.github/workflows/srtool.yml
+++ b/cumulus/.github/workflows/srtool.yml
@@ -54,7 +54,7 @@ jobs:
           - category: testing
             runtime: rococo-parachain
     steps:
-      - uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2
+      - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
         with:
           fetch-depth: 0