diff --git a/.github/workflows/aio-preview-build.yml b/.github/workflows/aio-preview-build.yml
index 4425c2b5492..487040f7c16 100644
--- a/.github/workflows/aio-preview-build.yml
+++ b/.github/workflows/aio-preview-build.yml
@@ -22,7 +22,7 @@ jobs:
       (github.event.action == 'labeled' && github.event.label.name == 'test preview') ||
       (github.event.action == 'synchronize' && contains(github.event.pull_request.labels.*.name, 'test preview'))
     steps:
-      - uses: actions/checkout@ec3a7ce113134d7a93b817d10a8272cb61118579 # renovate: tag=v2.0.0
+      - uses: actions/checkout@722adc63f1aa60a57ec37892e133b1d319cae598 # tag=v2.0.0
       - uses: ./.github/actions/yarn-install
 
       - uses: angular/dev-infra/github-actions/setup-bazel-remote-exec@3bc93449e11b733260d0294305bf57240d7e0a81
diff --git a/.github/workflows/aio-preview-deploy.yml b/.github/workflows/aio-preview-deploy.yml
index 4cf156204ca..e1791bcd122 100644
--- a/.github/workflows/aio-preview-deploy.yml
+++ b/.github/workflows/aio-preview-deploy.yml
@@ -21,7 +21,7 @@ jobs:
     runs-on: ubuntu-latest
     if: ${{ github.event.workflow_run.conclusion == 'success' }}
     steps:
-      - uses: actions/checkout@ec3a7ce113134d7a93b817d10a8272cb61118579 # renovate: tag=v2
+      - uses: actions/checkout@e2f20e631ae6d7dd3b768f56a5d2af784dd54791 # tag=v2
       - uses: angular/dev-infra/github-actions/deploy-previews/upload-artifacts-to-firebase@3bc93449e11b733260d0294305bf57240d7e0a81
         with:
           github-token: '${{secrets.GITHUB_TOKEN}}'