diff --git a/.github/workflows/arm-template-lint.yml b/.github/workflows/arm-template-lint.yml
index afd217e2ba..c12cdc7826 100644
--- a/.github/workflows/arm-template-lint.yml
+++ b/.github/workflows/arm-template-lint.yml
@@ -27,10 +27,10 @@ jobs:
           - template: "ARM-for-single-account.json"
             skip: "ResourceIds should not contain"
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8
 
       - name: Checkout arm-ttk
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8
         with:
           repository: Azure/arm-ttk
           path: arm-ttk
diff --git a/.github/workflows/bump-version.yml b/.github/workflows/bump-version.yml
index 0e018c7116..c957a5b91d 100644
--- a/.github/workflows/bump-version.yml
+++ b/.github/workflows/bump-version.yml
@@ -28,7 +28,7 @@ jobs:
 
     steps:
       - name: Checkout Cloudbeat Repo
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4
         with:
           ref: ${{ github.ref_name }}
           token: ${{ secrets.CLOUDSEC_MACHINE_TOKEN }}
diff --git a/.github/workflows/ci-pull_request.yml b/.github/workflows/ci-pull_request.yml
index 352b17de7a..2eca46956c 100644
--- a/.github/workflows/ci-pull_request.yml
+++ b/.github/workflows/ci-pull_request.yml
@@ -24,7 +24,7 @@ jobs:
     timeout-minutes: 60
     steps:
       - name: Check out the repo
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4
 
       - name: Initialize hermit
         shell: bash
@@ -76,7 +76,7 @@ jobs:
     timeout-minutes: 60
     steps:
       - name: Check out the repo
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4
 
       - name: Initialize hermit
         shell: bash
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 313381bf31..900ef1af15 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -24,7 +24,7 @@ jobs:
     timeout-minutes: 60
     steps:
       - name: Check out the repo
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4
       - name: Hermit Environment
         uses: ./.github/actions/hermit
         with:
@@ -38,7 +38,7 @@ jobs:
       asset_inventory_supported: ${{ steps.check-asset-inventory-supported-version.outputs.asset_inventory_supported }}
     steps:
       - name: Check out the repo
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4
 
       - name: Hermit Environment
         uses: ./.github/actions/hermit
@@ -67,7 +67,7 @@ jobs:
       id-token: "write"
     steps:
       - name: Check out the repo
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4
 
       - name: Hermit Environment
         uses: ./.github/actions/hermit
@@ -91,7 +91,7 @@ jobs:
       id-token: "write"
     steps:
       - name: Check out the repo
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4
 
       - name: Hermit Environment
         uses: ./.github/actions/hermit
@@ -114,7 +114,7 @@ jobs:
       id-token: "write"
     steps:
       - name: Check out the repo
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4
 
       - name: Hermit Environment
         uses: ./.github/actions/hermit
@@ -138,7 +138,7 @@ jobs:
       id-token: "write"
     steps:
       - name: Check out the repo
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4
 
       - name: Hermit Environment
         uses: ./.github/actions/hermit
@@ -160,7 +160,7 @@ jobs:
       id-token: 'write'
     steps:
       - name: Check out the repo
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4
 
       - name: Hermit Environment
         uses: ./.github/actions/hermit
@@ -185,7 +185,7 @@ jobs:
       id-token: "write"
     steps:
       - name: Check out the repo
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4
 
       - name: Hermit Environment
         uses: ./.github/actions/hermit
@@ -216,7 +216,7 @@ jobs:
           swap-storage: true
 
       - name: Check out the repo
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4
 
       - name: Hermit Environment
         uses: ./.github/actions/hermit
@@ -250,7 +250,7 @@ jobs:
           swap-storage: true
 
       - name: Check out the repo
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4
 
       - name: Hermit Environment
         uses: ./.github/actions/hermit
@@ -300,7 +300,7 @@ jobs:
           swap-storage: true
 
       - name: Check out the repo
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4
 
       - name: Hermit Environment
         uses: ./.github/actions/hermit
@@ -341,7 +341,7 @@ jobs:
       S3_BUCKET_ALLURE_REPORT_AP: "http://csp-allure-reports.s3.amazonaws.com/allure_reports/cloudbeat/ci"
     steps:
       - name: Check out the repo
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4
 
       - uses: actions/download-artifact@cc203385981b70ca67e1cc392babf9cc229d5806 # v4
         if: ${{ always() }}
diff --git a/.github/workflows/cloudformation-ci.yml b/.github/workflows/cloudformation-ci.yml
index 5b7dea7e54..f17c89bd08 100644
--- a/.github/workflows/cloudformation-ci.yml
+++ b/.github/workflows/cloudformation-ci.yml
@@ -32,7 +32,7 @@ jobs:
         working-directory: ${{ env.WORKING_DIR }}
     steps:
       - name: Check out the repo
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4
 
       - name: Init Hermit
         run: ./bin/hermit env -r >> $GITHUB_ENV
@@ -122,7 +122,7 @@ jobs:
     timeout-minutes: 40
     steps:
       - name: Check out the repo
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4
 
       - name: Hermit Environment
         uses: ./.github/actions/hermit
diff --git a/.github/workflows/destroy-environment.yml b/.github/workflows/destroy-environment.yml
index d504f67983..4f9a09d036 100644
--- a/.github/workflows/destroy-environment.yml
+++ b/.github/workflows/destroy-environment.yml
@@ -50,7 +50,7 @@ jobs:
       id-token: 'write'
     steps:
       - name: Check out the repo
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4
 
       - name: Init Hermit
         run: ./bin/hermit env -r >> $GITHUB_ENV
diff --git a/.github/workflows/destroy-expired-environment.yml b/.github/workflows/destroy-expired-environment.yml
index 807876dffd..39225b6274 100644
--- a/.github/workflows/destroy-expired-environment.yml
+++ b/.github/workflows/destroy-expired-environment.yml
@@ -13,7 +13,7 @@ jobs:
       env_found: ${{ steps.get_expired_envs.outputs.expired_env_found }}
     steps:
       - name: Checkout repository
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4
 
       - name: Hermit Environment
         uses: ./.github/actions/hermit
diff --git a/.github/workflows/eks-ci.yml b/.github/workflows/eks-ci.yml
index 059dc67121..8c20bed19d 100644
--- a/.github/workflows/eks-ci.yml
+++ b/.github/workflows/eks-ci.yml
@@ -58,7 +58,7 @@ jobs:
     timeout-minutes: 30
     steps:
       - name: Check out the repo
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4
 
       - name: Hermit Environment
         uses: ./.github/actions/hermit
@@ -136,7 +136,7 @@ jobs:
     timeout-minutes: 90
     steps:
       - name: Check out the repo
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8
 
       # Setup all required tools
       - name: Init Hermit
diff --git a/.github/workflows/packaging.yml b/.github/workflows/packaging.yml
index f524edb23a..88dedd94ba 100644
--- a/.github/workflows/packaging.yml
+++ b/.github/workflows/packaging.yml
@@ -39,7 +39,7 @@ jobs:
           swap-storage: true
 
       - name: Check out the repo
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4
 
       - name: Init Hermit
         run: ./bin/hermit env -r >> $GITHUB_ENV
diff --git a/.github/workflows/publish-cloudformation.yml b/.github/workflows/publish-cloudformation.yml
index a5ce3237af..efde8d1d50 100644
--- a/.github/workflows/publish-cloudformation.yml
+++ b/.github/workflows/publish-cloudformation.yml
@@ -17,7 +17,7 @@ jobs:
   publish_cloudformation:
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4
 
       - name: Configure AWS Credentials
         uses: aws-actions/configure-aws-credentials@5fd3084fc36e372ff1fff382a39b10d03659f355 # v2
diff --git a/.github/workflows/rerun-flaky-workflows.yml b/.github/workflows/rerun-flaky-workflows.yml
index b28b62626f..cede38a23f 100644
--- a/.github/workflows/rerun-flaky-workflows.yml
+++ b/.github/workflows/rerun-flaky-workflows.yml
@@ -48,7 +48,7 @@ jobs:
           fi
       - name: Check out the repo
         if: ${{ !cancelled() && failure() }} # Run only if the previous step failed
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4
 
       - name: Update env vars
         if: ${{ !cancelled() && failure() }} # Run only if the previous step failed
diff --git a/.github/workflows/sync-internal-cloudbeat-version.yml b/.github/workflows/sync-internal-cloudbeat-version.yml
index fa3ae4a978..65f33a8068 100644
--- a/.github/workflows/sync-internal-cloudbeat-version.yml
+++ b/.github/workflows/sync-internal-cloudbeat-version.yml
@@ -12,7 +12,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check out the branch
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4
         with:
           ref: ${{ github.ref }}
           token: ${{ secrets.CLOUDSEC_MACHINE_TOKEN }}
diff --git a/.github/workflows/sync-rule-templates.yml b/.github/workflows/sync-rule-templates.yml
index 207fb70ec2..64a1f30660 100644
--- a/.github/workflows/sync-rule-templates.yml
+++ b/.github/workflows/sync-rule-templates.yml
@@ -17,14 +17,14 @@ jobs:
     timeout-minutes: 60
     steps:
       - name: Checkout Integrations repo
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4
         with:
           token: ${{ secrets.CLOUDSEC_MACHINE_TOKEN }}
           repository: elastic/integrations
           path: integrations
 
       - name: Checkout Cloudbeat repo
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4
         with:
           token: ${{ secrets.CLOUDSEC_MACHINE_TOKEN }}
           path: cloudbeat
diff --git a/.github/workflows/test-agent-compatibility.yml b/.github/workflows/test-agent-compatibility.yml
index 321c35f72c..8fa7928a9c 100644
--- a/.github/workflows/test-agent-compatibility.yml
+++ b/.github/workflows/test-agent-compatibility.yml
@@ -16,7 +16,7 @@ jobs:
       matrix: ${{ steps.set-matrix.outputs.matrix }}
     steps:
       - name: Check out the repo
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4
 
       - name: Run script and set matrix
         id: set-matrix
@@ -37,7 +37,7 @@ jobs:
       id-token: "write"
     steps:
       - name: Check out the repo
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4
 
       - name: Hermit Environment
         uses: ./.github/actions/hermit
diff --git a/.github/workflows/test-e2e-flow.yml b/.github/workflows/test-e2e-flow.yml
index 35a6749de6..772df50896 100644
--- a/.github/workflows/test-e2e-flow.yml
+++ b/.github/workflows/test-e2e-flow.yml
@@ -25,7 +25,7 @@ jobs:
       stack_version: ${{ steps.set-variables.outputs.stack-version }}
     steps:
       - name: Check out the repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           ref: ${{ inputs.branch }}
 
diff --git a/.github/workflows/test-environment.yml b/.github/workflows/test-environment.yml
index 0aa04861f0..b1fe4c06f8 100644
--- a/.github/workflows/test-environment.yml
+++ b/.github/workflows/test-environment.yml
@@ -178,7 +178,7 @@ jobs:
       aws-cnvm-stack-name: ${{ steps.upload-state.outputs.aws-cnvm-stack }}
     steps:
       - name: Check out the repo
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4
 
       - name: Init Hermit
         run: ./bin/hermit env -r >> $GITHUB_ENV
diff --git a/.github/workflows/test-gcp-dm.yml b/.github/workflows/test-gcp-dm.yml
index 10f30eae77..b72e662ab0 100644
--- a/.github/workflows/test-gcp-dm.yml
+++ b/.github/workflows/test-gcp-dm.yml
@@ -45,7 +45,7 @@ jobs:
           echo "GCP_DEPLOYMENT_NAME=ea-cspm-ci-dm-test-$suffix" >> $GITHUB_ENV
 
       - name: Check out the repo
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4
 
       - name: Init Hermit
         run: ./bin/hermit env -r >> $GITHUB_ENV
@@ -147,7 +147,7 @@ jobs:
           echo "GCP_SA_DEPLOYMENT_NAME=sa-cspm-gcp-ci-test-$suffix" >> $GITHUB_ENV
 
       - name: Check out the repo
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4
 
       - name: Init Hermit
         run: ./bin/hermit env -r >> $GITHUB_ENV
diff --git a/.github/workflows/test-opa-coverage.yml b/.github/workflows/test-opa-coverage.yml
index 3adc58a86d..528395053e 100644
--- a/.github/workflows/test-opa-coverage.yml
+++ b/.github/workflows/test-opa-coverage.yml
@@ -13,7 +13,7 @@ jobs:
         working-directory: ./security-policies
     steps:
       - name: Checkout
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4
 
       - name: Init Hermit
         run: ../bin/hermit env -r >> $GITHUB_ENV
diff --git a/.github/workflows/test-opa-policies.yml b/.github/workflows/test-opa-policies.yml
index ce63e7cf1f..36eacc6b4d 100644
--- a/.github/workflows/test-opa-policies.yml
+++ b/.github/workflows/test-opa-policies.yml
@@ -14,7 +14,7 @@ jobs:
         working-directory: ./security-policies
     steps:
       - name: Checkout
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4
 
       - name: Init Hermit
         run: ../bin/hermit env -r >> $GITHUB_ENV
diff --git a/.github/workflows/unit-test.yml b/.github/workflows/unit-test.yml
index ef05762221..cb3352157f 100644
--- a/.github/workflows/unit-test.yml
+++ b/.github/workflows/unit-test.yml
@@ -25,7 +25,7 @@ jobs:
     timeout-minutes: 15
     steps:
       - name: Check out the repo
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4
 
       - name: Get diff k8s manifests
         uses: technote-space/get-diff-action@f27caffdd0fb9b13f4fc191c016bb4e0632844af # v6
diff --git a/.github/workflows/updatecli.yml b/.github/workflows/updatecli.yml
index 72c9bd2878..76377daa7a 100644
--- a/.github/workflows/updatecli.yml
+++ b/.github/workflows/updatecli.yml
@@ -62,7 +62,7 @@ jobs:
           large-packages: false
           docker-images: true
           swap-storage: true
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4
       - name: Init Hermit
         run: ./bin/hermit env -r >> $GITHUB_ENV
       - name: Install Updatecli in the runner
@@ -107,7 +107,7 @@ jobs:
           large-packages: false
           docker-images: true
           swap-storage: true
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4
       - name: Init Hermit
         run: ./bin/hermit env -r >> $GITHUB_ENV
       - name: Install Updatecli in the runner
diff --git a/.github/workflows/upgrade-environment.yml b/.github/workflows/upgrade-environment.yml
index 14d4d337f7..e9ec2fc4e2 100644
--- a/.github/workflows/upgrade-environment.yml
+++ b/.github/workflows/upgrade-environment.yml
@@ -48,7 +48,7 @@ jobs:
       target-agent-version: ${{ steps.clean-version.outputs.AGENT_VERSION }}
     steps:
       - name: Check out the repo
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4
 
       - name: Set Previous Version
         id: set-previous-version
@@ -99,7 +99,7 @@ jobs:
       id-token: 'write'
     steps:
       - name: Check out the repo
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4
 
       - name: Init Hermit
         run: ./bin/hermit env -r >> $GITHUB_ENV