diff --git a/.github/workflows/git-whitespace.yml b/.github/workflows/git-whitespace.yml
index 4dc6cfe..262b530 100644
--- a/.github/workflows/git-whitespace.yml
+++ b/.github/workflows/git-whitespace.yml
@@ -19,7 +19,7 @@ jobs:
 
     steps:
     - name: Checkout pkg
-      uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10
+      uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
       with:
         repository: ${{ github.repository }}
         path: scratch/${{ github.repository }}
diff --git a/.github/workflows/mu2e-build-single-pkg.yml b/.github/workflows/mu2e-build-single-pkg.yml
index d6dfa9f..17276a1 100644
--- a/.github/workflows/mu2e-build-single-pkg.yml
+++ b/.github/workflows/mu2e-build-single-pkg.yml
@@ -32,14 +32,14 @@ jobs:
     - name: SUID for tar
       run: sudo chown root /bin/tar && sudo chmod u+s /bin/tar
 
-    - uses: cvmfs-contrib/github-action-cvmfs@d93d881391926e8146776c13345c3e23d6393acd
+    - uses: cvmfs-contrib/github-action-cvmfs@72f2a8d366043978d6aebee154bc9ed321c2f2a8
 
     - name: test cvmfs
       run: |
         ls -l /cvmfs/fermilab.opensciencegrid.org/products/artdaq/spack_areas
 
     - name: Checkout pkg
-      uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10
+      uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
       with:
         repository: ${{ github.repository }}
         path: scratch/${{ github.repository }}
@@ -60,7 +60,7 @@ jobs:
 
     - name: Cache cvmfs cache
       id: cvmfs_cache
-      uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae
+      uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9
       with:
         path: /var/lib/cvmfs/shared
         key: cachecvmfs-${{ steps.version.outputs.tag }}
diff --git a/.github/workflows/mu2e-develop-cpp-ci.yml b/.github/workflows/mu2e-develop-cpp-ci.yml
index 61bc201..cece56c 100644
--- a/.github/workflows/mu2e-develop-cpp-ci.yml
+++ b/.github/workflows/mu2e-develop-cpp-ci.yml
@@ -34,14 +34,14 @@ jobs:
     - name: SUID for tar
       run: sudo chown root /bin/tar && sudo chmod u+s /bin/tar
 
-    - uses: cvmfs-contrib/github-action-cvmfs@d93d881391926e8146776c13345c3e23d6393acd
+    - uses: cvmfs-contrib/github-action-cvmfs@72f2a8d366043978d6aebee154bc9ed321c2f2a8
 
     - name: test cvmfs
       run: |
         ls -l /cvmfs/fermilab.opensciencegrid.org/products/artdaq/spack_areas
 
     - name: Checkout pkg
-      uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10
+      uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
       with:
         repository: ${{ github.repository }}
         path: scratch/${{ github.repository }}
@@ -62,7 +62,7 @@ jobs:
 
     - name: Cache cvmfs cache
       id: cvmfs_cache
-      uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae
+      uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9
       with:
         path: /var/lib/cvmfs/shared
         key: cachecvmfs-${{ steps.version.outputs.tag }}
diff --git a/.github/workflows/mu2e-format-single-pkg.yml b/.github/workflows/mu2e-format-single-pkg.yml
index 21a6086..d9851d7 100644
--- a/.github/workflows/mu2e-format-single-pkg.yml
+++ b/.github/workflows/mu2e-format-single-pkg.yml
@@ -39,14 +39,14 @@ jobs:
     - name: SUID for tar
       run: sudo chown root /bin/tar && sudo chmod u+s /bin/tar
 
-    - uses: cvmfs-contrib/github-action-cvmfs@d93d881391926e8146776c13345c3e23d6393acd
+    - uses: cvmfs-contrib/github-action-cvmfs@72f2a8d366043978d6aebee154bc9ed321c2f2a8
 
     - name: test cvmfs
       run: |
         ls -l /cvmfs/fermilab.opensciencegrid.org/products/artdaq/spack_areas
 
     - name: Checkout pkg
-      uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10
+      uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
       with:
         repository: ${{ github.repository }}
         path: scratch/${{ github.repository }}
@@ -67,7 +67,7 @@ jobs:
 
     - name: Cache cvmfs cache
       id: cvmfs_cache
-      uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae
+      uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9
       with:
         path: /var/lib/cvmfs/shared
         key: cachecvmfs-${{ steps.version.outputs.tag }}
diff --git a/.github/workflows/mu2e-lcov.yml b/.github/workflows/mu2e-lcov.yml
index 287e4c4..ef44722 100644
--- a/.github/workflows/mu2e-lcov.yml
+++ b/.github/workflows/mu2e-lcov.yml
@@ -37,14 +37,14 @@ jobs:
     - name: SUID for tar
       run: sudo chown root /bin/tar && sudo chmod u+s /bin/tar
 
-    - uses: cvmfs-contrib/github-action-cvmfs@d93d881391926e8146776c13345c3e23d6393acd
+    - uses: cvmfs-contrib/github-action-cvmfs@72f2a8d366043978d6aebee154bc9ed321c2f2a8
 
     - name: test cvmfs
       run: |
         ls -l /cvmfs/fermilab.opensciencegrid.org/products/artdaq/spack_areas
 
     - name: Checkout pkg
-      uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10
+      uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
       with:
         repository: Mu2e/otsdaq-mu2e
         path: scratch/Mu2e/otsdaq-mu2e
@@ -65,7 +65,7 @@ jobs:
 
     - name: Cache cvmfs cache
       id: cvmfs_cache
-      uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae
+      uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9
       with:
         path: /var/lib/cvmfs/shared
         key: cachecvmfs-${{ steps.version.outputs.tag }}
diff --git a/.github/workflows/mu2e-test-single-pkg.yml b/.github/workflows/mu2e-test-single-pkg.yml
index 48f2dcb..2867cca 100644
--- a/.github/workflows/mu2e-test-single-pkg.yml
+++ b/.github/workflows/mu2e-test-single-pkg.yml
@@ -32,14 +32,14 @@ jobs:
     - name: SUID for tar
       run: sudo chown root /bin/tar && sudo chmod u+s /bin/tar
 
-    - uses: cvmfs-contrib/github-action-cvmfs@d93d881391926e8146776c13345c3e23d6393acd
+    - uses: cvmfs-contrib/github-action-cvmfs@72f2a8d366043978d6aebee154bc9ed321c2f2a8
 
     - name: test cvmfs
       run: |
         ls -l /cvmfs/fermilab.opensciencegrid.org/products/artdaq/spack_areas
 
     - name: Checkout pkg
-      uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10
+      uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
       with:
         repository: ${{ github.repository }}
         path: scratch/${{ github.repository }}
@@ -60,7 +60,7 @@ jobs:
 
     - name: Cache cvmfs cache
       id: cvmfs_cache
-      uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae
+      uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9
       with:
         path: /var/lib/cvmfs/shared
         key: cachecvmfs-${{ steps.version.outputs.tag }}
diff --git a/.github/workflows/mu2e-tidy-single-pkg.yml b/.github/workflows/mu2e-tidy-single-pkg.yml
index f49143d..0b9304b 100644
--- a/.github/workflows/mu2e-tidy-single-pkg.yml
+++ b/.github/workflows/mu2e-tidy-single-pkg.yml
@@ -36,14 +36,14 @@ jobs:
     - name: SUID for tar
       run: sudo chown root /bin/tar && sudo chmod u+s /bin/tar
 
-    - uses: cvmfs-contrib/github-action-cvmfs@d93d881391926e8146776c13345c3e23d6393acd
+    - uses: cvmfs-contrib/github-action-cvmfs@72f2a8d366043978d6aebee154bc9ed321c2f2a8
 
     - name: test cvmfs
       run: |
         ls -l /cvmfs/fermilab.opensciencegrid.org/products/artdaq/spack_areas
 
     - name: Checkout pkg
-      uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10
+      uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
       with:
         repository: ${{ github.repository }}
         path: scratch/${{ github.repository }}
@@ -64,7 +64,7 @@ jobs:
 
     - name: Cache cvmfs cache
       id: cvmfs_cache
-      uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae
+      uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9
       with:
         path: /var/lib/cvmfs/shared
         key: cachecvmfs-${{ steps.version.outputs.tag }}