diff --git a/.github/workflows/build_and_publish.yaml b/.github/workflows/build_and_publish.yaml
index dc0cb37..73850c1 100644
--- a/.github/workflows/build_and_publish.yaml
+++ b/.github/workflows/build_and_publish.yaml
@@ -11,7 +11,7 @@ jobs:
     # publish the exact images that were built and tested.
     runs-on: ubuntu-22.04
     steps:
-    - uses: actions/checkout@v5
+    - uses: actions/checkout@v6
     - uses: "opensafely-core/setup-action@v1"
       with:
           install-just: true
diff --git a/.github/workflows/tests.yaml b/.github/workflows/tests.yaml
index 6cd090d..045ea7d 100644
--- a/.github/workflows/tests.yaml
+++ b/.github/workflows/tests.yaml
@@ -8,7 +8,7 @@ jobs:
       matrix:
         version: [v1, v2]
     steps:
-    - uses: actions/checkout@v5
+    - uses: actions/checkout@v6
     - uses: "opensafely-core/setup-action@v1"
       with:
           install-just: true
@@ -19,7 +19,7 @@ jobs:
   lint:
     runs-on: ubuntu-22.04
     steps:
-    - uses: actions/checkout@v5
+    - uses: actions/checkout@v6
     - uses: "opensafely-core/setup-action@v1"
       with:
           install-just: true