diff --git a/.github/workflows/code-ranker.yml b/.github/workflows/code-ranker.yml
index 208db7b..4781218 100644
--- a/.github/workflows/code-ranker.yml
+++ b/.github/workflows/code-ranker.yml
@@ -5,7 +5,7 @@ on:
 jobs:
   code-ranker:
     # Pinned to an immutable commit SHA (supply-chain hardening).
-    uses: code-ranker-com/actions/.github/workflows/report.yml@42c2fba1acd7c99a71875c8eefa171224d8e683c
+    uses: code-ranker-com/actions/.github/workflows/report.yml@f5df154e14f221757012ec87455ec423e6ce3df9
     permissions:
       id-token: write
       contents: read
diff --git a/.github/workflows/release-tests-image.yml b/.github/workflows/release-tests-image.yml
index cff94d9..30f8d62 100644
--- a/.github/workflows/release-tests-image.yml
+++ b/.github/workflows/release-tests-image.yml
@@ -73,7 +73,7 @@ jobs:
         uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c  # v4.2.0
 
       - name: Log in to GHCR
-        uses: docker/login-action@abd2ef45e78c5afb21d64d4ca52ee8550d9572c7  # v4.5.1
+        uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f  # v4.6.0
         with:
           registry: ghcr.io
           username: ${{ github.actor }}