diff --git a/.github/workflows/build_and_publish.yaml b/.github/workflows/build_and_publish.yaml
index ad4161e..dc0cb37 100644
--- a/.github/workflows/build_and_publish.yaml
+++ b/.github/workflows/build_and_publish.yaml
@@ -11,7 +11,7 @@ jobs:
     # publish the exact images that were built and tested.
     runs-on: ubuntu-22.04
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v5
     - uses: "opensafely-core/setup-action@v1"
       with:
           install-just: true
diff --git a/.github/workflows/tests.yaml b/.github/workflows/tests.yaml
index f5a9ed6..6cd090d 100644
--- a/.github/workflows/tests.yaml
+++ b/.github/workflows/tests.yaml
@@ -8,7 +8,7 @@ jobs:
       matrix:
         version: [v1, v2]
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v5
     - uses: "opensafely-core/setup-action@v1"
       with:
           install-just: true
@@ -19,7 +19,7 @@ jobs:
   lint:
     runs-on: ubuntu-22.04
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v5
     - uses: "opensafely-core/setup-action@v1"
       with:
           install-just: true