diff --git a/.github/workflows/autotools-cmake.yml b/.github/workflows/autotools-cmake.yml
index 0f33df5a..4ff6d4ad 100644
--- a/.github/workflows/autotools-cmake.yml
+++ b/.github/workflows/autotools-cmake.yml
@@ -55,7 +55,7 @@ jobs:
         shell: bash
     runs-on: "${{ matrix.os }}"
     steps:
-    - uses: actions/checkout@v3.0.1
+    - uses: actions/checkout@v3.0.2
 
     - name: (Linux) Install build dependencies
       if: "${{ runner.os == 'Linux' }}"
diff --git a/.github/workflows/cmake-required-version.yml b/.github/workflows/cmake-required-version.yml
index 64e1eb8a..303611c6 100644
--- a/.github/workflows/cmake-required-version.yml
+++ b/.github/workflows/cmake-required-version.yml
@@ -40,7 +40,7 @@ jobs:
     name: Ensure realistic minimum CMake version requirement
     runs-on: ubuntu-20.04
     steps:
-    - uses: actions/checkout@v3.0.1
+    - uses: actions/checkout@v3.0.2
 
     - name: Install ancient CMake
       run: |
diff --git a/.github/workflows/coverage.yml b/.github/workflows/coverage.yml
index f2d82365..9c82b947 100644
--- a/.github/workflows/coverage.yml
+++ b/.github/workflows/coverage.yml
@@ -42,7 +42,7 @@ jobs:
     env:
       CFLAGS: -g3 -pipe
     steps:
-    - uses: actions/checkout@v3.0.1
+    - uses: actions/checkout@v3.0.2
     - name: Add Clang/LLVM repositories
       run: |-
         set -x
diff --git a/.github/workflows/cppcheck.yml b/.github/workflows/cppcheck.yml
index 19549282..e81be4e3 100644
--- a/.github/workflows/cppcheck.yml
+++ b/.github/workflows/cppcheck.yml
@@ -40,7 +40,7 @@ jobs:
     name: Run Cppcheck
     runs-on: macos-latest
     steps:
-    - uses: actions/checkout@v3.0.1
+    - uses: actions/checkout@v3.0.2
     - name: Install runtime dependencies
       run: |
         exec brew install cppcheck findutils
diff --git a/.github/workflows/expat_config_h.yml b/.github/workflows/expat_config_h.yml
index 2167524f..0054cb72 100644
--- a/.github/workflows/expat_config_h.yml
+++ b/.github/workflows/expat_config_h.yml
@@ -40,7 +40,7 @@ jobs:
     name: Check expat_config.h.{in,cmake} for regressions
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v3.0.1
+    - uses: actions/checkout@v3.0.2
     - name: Check expat_config.h.{in,cmake} for regressions
       run: |
         set -v
diff --git a/.github/workflows/linux.yml b/.github/workflows/linux.yml
index 972baaac..e2706c50 100644
--- a/.github/workflows/linux.yml
+++ b/.github/workflows/linux.yml
@@ -80,7 +80,7 @@ jobs:
     env:
       CFLAGS: -g3 -pipe
     steps:
-    - uses: actions/checkout@v3.0.1
+    - uses: actions/checkout@v3.0.2
     - name: Add Clang/LLVM repositories
       run: |-
         set -x
diff --git a/.github/workflows/macos.yml b/.github/workflows/macos.yml
index 1b9c5212..6a6aa7d3 100644
--- a/.github/workflows/macos.yml
+++ b/.github/workflows/macos.yml
@@ -50,7 +50,7 @@ jobs:
             FLAT_ENV: CC=clang CXX=clang++ LD=clang++ QA_SANITIZER=address
     runs-on: macos-latest
     steps:
-    - uses: actions/checkout@v3.0.1
+    - uses: actions/checkout@v3.0.2
     - name: Install build dependencies
       run: |
         sudo rm /usr/local/bin/2to3  # so that "brew link" will work
diff --git a/.github/workflows/valid-xml.yml b/.github/workflows/valid-xml.yml
index ae91c410..2d5c2fed 100644
--- a/.github/workflows/valid-xml.yml
+++ b/.github/workflows/valid-xml.yml
@@ -40,7 +40,7 @@ jobs:
     name: Ensure well-formed and valid XML
     runs-on: ubuntu-20.04
     steps:
-    - uses: actions/checkout@v3.0.1
+    - uses: actions/checkout@v3.0.2
 
     - name: Install build dependencies
       run: |-