diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index d4a42cf..7aadca0 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -11,7 +11,7 @@ jobs:
     name: guardrails
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - name: forbidden strings
         run: python tools/check_forbidden_strings.py
       - name: notice file exists
@@ -46,7 +46,7 @@ jobs:
       OFR_DATABASE_URL: postgresql+psycopg://ofr:ofr@localhost:5432/ofr
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - uses: actions/setup-python@v5
         with:
           python-version: ${{ matrix.python-version }}
@@ -87,7 +87,7 @@ jobs:
       DJANGO_DEBUG: "0"
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - uses: actions/setup-python@v5
         with:
           python-version: "3.12"
@@ -122,7 +122,7 @@ jobs:
     runs-on: ubuntu-latest
     needs: guardrails
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - uses: actions/setup-python@v5
         with:
           python-version: "3.12"