diff --git a/.github/workflows/CI.yml b/.github/workflows/CI.yml
index 1d24ebeae46..b7b5f168605 100644
--- a/.github/workflows/CI.yml
+++ b/.github/workflows/CI.yml
@@ -55,7 +55,7 @@ jobs:
         with:
            go-version: 1.23.2
         id: go
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
         with:
          path: src/github.com/goharbor/harbor
       - name: setup env
@@ -116,7 +116,7 @@ jobs:
         with:
           go-version: 1.23.2
         id: go
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
         with:
           path: src/github.com/goharbor/harbor
       - name: setup env
@@ -177,7 +177,7 @@ jobs:
         with:
           go-version: 1.23.2
         id: go
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
         with:
           path: src/github.com/goharbor/harbor
       - name: setup env
@@ -238,7 +238,7 @@ jobs:
         with:
           go-version: 1.23.2
         id: go
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
         with:
           path: src/github.com/goharbor/harbor
       - name: setup env
@@ -297,7 +297,7 @@ jobs:
         with:
           go-version: 1.23.2
         id: go
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
         with:
           path: src/github.com/goharbor/harbor
       - name: setup env
@@ -347,7 +347,7 @@ jobs:
       - uses: actions/setup-node@v5
         with:
           node-version: '18'
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
         with:
           path: src/github.com/goharbor/harbor
       - name: script
diff --git a/.github/workflows/build-package.yml b/.github/workflows/build-package.yml
index e21420f9161..6715cb4c39d 100644
--- a/.github/workflows/build-package.yml
+++ b/.github/workflows/build-package.yml
@@ -31,13 +31,13 @@ jobs:
         with:
           docker_version: 20.10
           docker_channel: stable
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - uses: jitterbit/get-changed-files@v1
         id: changed-files
         with:
           format: space-delimited
           token: ${{ secrets.GITHUB_TOKEN }}
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
         with:
           path: src/github.com/goharbor/harbor
       - name: Build Base Image
diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index 20f0a352e30..6e986d5f264 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -13,7 +13,7 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v5
+      uses: actions/checkout@v6
       with:
         # We must fetch at least the immediate parents so that if this is
         # a pull request then we can checkout the head.
diff --git a/.github/workflows/conformance_test.yml b/.github/workflows/conformance_test.yml
index 668f4290b80..8c73f17f06d 100644
--- a/.github/workflows/conformance_test.yml
+++ b/.github/workflows/conformance_test.yml
@@ -28,7 +28,7 @@ jobs:
         with:
           go-version: 1.23.2
         id: go
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
         with:
           path: src/github.com/goharbor/harbor
       - name: before_install
diff --git a/.github/workflows/nightly-trivy-scan.yml b/.github/workflows/nightly-trivy-scan.yml
index 64e6acfdcc4..4e4cc16a0b2 100644
--- a/.github/workflows/nightly-trivy-scan.yml
+++ b/.github/workflows/nightly-trivy-scan.yml
@@ -21,7 +21,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: Run Trivy vulnerability scanner
         uses: aquasecurity/trivy-action@master
         with:
diff --git a/.github/workflows/publish_release.yml b/.github/workflows/publish_release.yml
index 22cf6f282cb..a8d7d19a2bf 100644
--- a/.github/workflows/publish_release.yml
+++ b/.github/workflows/publish_release.yml
@@ -9,7 +9,7 @@ jobs:
   release:
     runs-on: oracle-vm-24cpu-96gb-x86-64
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - name: Setup env
         run: |
           echo "CUR_TAG=${{ github.ref_name }}" >> $GITHUB_ENV