diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 4aa93810d..dda333e0f 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -21,7 +21,7 @@ jobs:
 
     steps:
       - name: Check out code
-        uses: actions/checkout@v3
+        uses: actions/checkout@v5
 
       - name: Initialize CodeQL
         uses: github/codeql-action/init@v2
diff --git a/.github/workflows/go.yml b/.github/workflows/go.yml
index 1a3a33318..f42c09418 100644
--- a/.github/workflows/go.yml
+++ b/.github/workflows/go.yml
@@ -19,7 +19,7 @@ jobs:
           go-version: 1.19
 
       - name: Check out code
-        uses: actions/checkout@v3
+        uses: actions/checkout@v5
 
       - name: Restore Go modules cache
         uses: actions/cache@v3
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index dd1fede0d..6f5a469b4 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -25,7 +25,7 @@ jobs:
           go-version: 1.19
 
       - name: Check out code
-        uses: actions/checkout@v3
+        uses: actions/checkout@v5
 
       - name: Restore Go modules cache
         uses: actions/cache@v3
diff --git a/.github/workflows/releases.yml b/.github/workflows/releases.yml
index 606327059..23e0bc141 100644
--- a/.github/workflows/releases.yml
+++ b/.github/workflows/releases.yml
@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-20.04
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v5
         with:
           fetch-depth: 0
       - name: Set up Go 1.19
@@ -50,7 +50,7 @@ jobs:
           GORELEASER_CURRENT_TAG: ${{steps.changelog.outputs.tag-name}}
           CERT_PASSWORD: ${{secrets.WINDOWS_CERT_PASSWORD}}
       - name: Checkout documentation site
-        uses: actions/checkout@v3
+        uses: actions/checkout@v5
         with:
           repository: github/cli.github.com
           path: site
@@ -137,7 +137,7 @@ jobs:
     runs-on: windows-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v5
       - name: Download gh.exe
         id: download_exe
         shell: bash
@@ -197,7 +197,7 @@ jobs:
         env:
           COMMITTER_TOKEN: ${{ secrets.UPLOAD_GITHUB_TOKEN }}
       - name: Checkout scoop bucket
-        uses: actions/checkout@v3
+        uses: actions/checkout@v5
         with:
           repository: cli/scoop-gh
           path: scoop-gh