diff --git a/.github/workflows/format-code.yml b/.github/workflows/format-code.yml
index 4f135c831..4e7d0e37a 100644
--- a/.github/workflows/format-code.yml
+++ b/.github/workflows/format-code.yml
@@ -6,7 +6,7 @@ jobs:
   format-code:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4.2.2
+      - uses: actions/checkout@v5.0.0
       - uses: ministryofjustice/github-actions/code-formatter@db1a54895bf5fb975c60af47e5a3aab96505ca3e # v18.6.0
         with:
           ignore-files: "terraform.tfvars"
diff --git a/.github/workflows/go-vet-lint-deps.yaml b/.github/workflows/go-vet-lint-deps.yaml
index 6ef4abbbb..abd606d4a 100644
--- a/.github/workflows/go-vet-lint-deps.yaml
+++ b/.github/workflows/go-vet-lint-deps.yaml
@@ -13,7 +13,7 @@ jobs:
     steps:
       # Checkout your project with git
       - name: Checkout
-        uses: actions/checkout@v4.2.2
+        uses: actions/checkout@v5.0.0
 
       # Install Go on the VM running the action.
       - uses: WillAbides/setup-go-faster@v1.14.0
diff --git a/.github/workflows/malformed-yaml.yml b/.github/workflows/malformed-yaml.yml
index a9709faa0..9e8f2b8b8 100644
--- a/.github/workflows/malformed-yaml.yml
+++ b/.github/workflows/malformed-yaml.yml
@@ -6,7 +6,7 @@ jobs:
   reject-malformed-yaml:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4.2.2
+      - uses: actions/checkout@v5.0.0
       - uses: ministryofjustice/github-actions/malformed-yaml@v18.6.0
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/terraform-tools.yml b/.github/workflows/terraform-tools.yml
index cdf0f5910..029350c57 100644
--- a/.github/workflows/terraform-tools.yml
+++ b/.github/workflows/terraform-tools.yml
@@ -10,7 +10,7 @@ jobs:
   tflint:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4.2.2
+      - uses: actions/checkout@v5.0.0
       - uses: actions/cache@v4
         with:
           path: ~/.tflint.d/plugins
@@ -27,7 +27,7 @@ jobs:
     permissions:
       security-events: write
     steps:
-      - uses: actions/checkout@v4.2.2
+      - uses: actions/checkout@v5.0.0
       - uses: aquasecurity/tfsec-sarif-action@v0.1.4
         with:
           tfsec_args: --force-all-dirs --soft-fail -m=CRITICAL --no-module-downloads --exclude-path=terraform/aws-accounts/cloud-platform-ephemeral-test --exclude-path=terraform/aws-accounts/cloud-platform-dsd --exclude-path=terraform/aws-accounts/cloud-platform-aws/vpc/kops --exclude-path=terraform/modules