diff --git a/.github/workflows/ci-build.yml b/.github/workflows/ci-build.yml
index 34b887b..3730310 100644
--- a/.github/workflows/ci-build.yml
+++ b/.github/workflows/ci-build.yml
@@ -30,7 +30,7 @@ jobs:
 
       # ICAT Ansible clone and install dependencies
       - name: Checkout icat-ansible
-        uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c # v3.3.0
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0
         with:
           repository: icatproject-contrib/icat-ansible
           path: icat-ansible
@@ -80,7 +80,7 @@ jobs:
           asadmin undeploy `asadmin list-applications | grep authn.db | awk '{print $1;}'`
 
       - name: Checkout authn-db
-        uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c # v3.3.0
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0
 
       # Payara must be sourced otherwise the Maven build command fails
       - name: Run Build