diff --git a/.github/workflows/appbuild.yml b/.github/workflows/appbuild.yml
index a9012cebc..d25b307c5 100644
--- a/.github/workflows/appbuild.yml
+++ b/.github/workflows/appbuild.yml
@@ -12,7 +12,7 @@ jobs:
         node-version: [14.x]
 
     steps:
-    - uses: actions/checkout@v2.3.4
+    - uses: actions/checkout@v2.3.5
     - name: Use Node.js ${{ matrix.node-version }}
       uses: actions/setup-node@v2.4.1
       with:
diff --git a/.github/workflows/command-rebase.yml b/.github/workflows/command-rebase.yml
index c497cb38e..814719dcb 100644
--- a/.github/workflows/command-rebase.yml
+++ b/.github/workflows/command-rebase.yml
@@ -26,7 +26,7 @@ jobs:
           reaction-type: "+1"
 
       - name: Checkout the latest code
-        uses: actions/checkout@v2
+        uses: actions/checkout@v2.3.5
         with:
           fetch-depth: 0
           token: ${{ secrets.COMMAND_BOT_PAT }}
diff --git a/.github/workflows/integration.yml b/.github/workflows/integration.yml
index 3bcbe5e85..69757014c 100644
--- a/.github/workflows/integration.yml
+++ b/.github/workflows/integration.yml
@@ -43,7 +43,7 @@ jobs:
 
     steps:
       - name: Checkout server
-        uses: actions/checkout@v2.3.4
+        uses: actions/checkout@v2.3.5
         with:
           repository: nextcloud/server
           ref: ${{ matrix.server-versions }}
@@ -56,7 +56,7 @@ jobs:
           git -c "http.extraheader=$auth_header" -c protocol.version=2 submodule update --init --force --recursive --depth=1
 
       - name: Checkout app
-        uses: actions/checkout@v2.3.4
+        uses: actions/checkout@v2.3.5
         with:
           path: apps/${{ env.APP_NAME }}
 
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index 5387b4274..c5a506c29 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -17,7 +17,7 @@ jobs:
 
     name: php${{ matrix.php-versions }} lint
     steps:
-      - uses: actions/checkout@v2.3.4
+      - uses: actions/checkout@v2.3.5
       - name: Set up php${{ matrix.php-versions }}
         uses: shivammathur/setup-php@2.15.0
         with:
@@ -31,7 +31,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Checkout
-      uses: actions/checkout@v2.3.4
+      uses: actions/checkout@v2.3.5
     - name: Set up php
       uses: shivammathur/setup-php@2.15.0
       with:
@@ -50,7 +50,7 @@ jobs:
         node-version: [14.x]
 
     steps:
-      - uses: actions/checkout@v2.3.4
+      - uses: actions/checkout@v2.3.5
       - name: Use node ${{ matrix.node-version }}
         uses: actions/setup-node@v2.4.1
         with:
@@ -71,7 +71,7 @@ jobs:
 
     name: stylelint node${{ matrix.node-version }}
     steps:
-      - uses: actions/checkout@v2.3.4
+      - uses: actions/checkout@v2.3.5
 
       - name: Set up node ${{ matrix.node-version }}
         uses: actions/setup-node@v2.4.1
diff --git a/.github/workflows/nightly.yml b/.github/workflows/nightly.yml
index db83b5a66..bef97c3b2 100644
--- a/.github/workflows/nightly.yml
+++ b/.github/workflows/nightly.yml
@@ -17,7 +17,7 @@ jobs:
         node-version: [14.x]
 
     steps:
-    - uses: actions/checkout@v2.3.4
+    - uses: actions/checkout@v2.3.5
     - name: Use Node.js ${{ matrix.node-version }}
       uses: actions/setup-node@v2.4.1
       with:
diff --git a/.github/workflows/nodejs.yml b/.github/workflows/nodejs.yml
index 3ae806e9e..aaed129cd 100644
--- a/.github/workflows/nodejs.yml
+++ b/.github/workflows/nodejs.yml
@@ -12,7 +12,7 @@ jobs:
         node-version: [14.x]
 
     steps:
-    - uses: actions/checkout@v2.3.4
+    - uses: actions/checkout@v2.3.5
     - name: Use Node.js ${{ matrix.node-version }}
       uses: actions/setup-node@v2.4.1
       with:
diff --git a/.github/workflows/phpunit.yml b/.github/workflows/phpunit.yml
index b689d0481..52f5a0bc1 100644
--- a/.github/workflows/phpunit.yml
+++ b/.github/workflows/phpunit.yml
@@ -44,7 +44,7 @@ jobs:
 
     steps:
       - name: Checkout server
-        uses: actions/checkout@v2.3.4
+        uses: actions/checkout@v2.3.5
         with:
           repository: nextcloud/server
           ref: ${{ matrix.server-versions }}
@@ -57,7 +57,7 @@ jobs:
           git -c "http.extraheader=$auth_header" -c protocol.version=2 submodule update --init --force --recursive --depth=1
 
       - name: Checkout app
-        uses: actions/checkout@v2.3.4
+        uses: actions/checkout@v2.3.5
         with:
           path: apps/${{ env.APP_NAME }}
 
diff --git a/.github/workflows/static-analysis.yml b/.github/workflows/static-analysis.yml
index ccb6c2a1e..1b7d3522d 100644
--- a/.github/workflows/static-analysis.yml
+++ b/.github/workflows/static-analysis.yml
@@ -16,7 +16,7 @@ jobs:
       name: Nextcloud ${{ matrix.ocp-version }}
       steps:
           - name: Checkout
-            uses: actions/checkout@v2.3.4
+            uses: actions/checkout@v2.3.5
           - name: Set up php
             uses: shivammathur/setup-php@2.15.0
             with: