diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 3cb650f..4320d7d 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -72,7 +72,7 @@ jobs:
             - name: Upload GuardDog SARIF
               if: always()
               # github/codeql-action v3.28.13
-              uses: github/codeql-action/upload-sarif@87557b9c84dde89fdd9b10e88954ac2f4248e463
+              uses: github/codeql-action/upload-sarif@8aad20d150bbac5944a9f9d289da16a4b0d87c1e
               with:
                   sarif_file: guarddog.sarif
                   category: guarddog
@@ -114,7 +114,7 @@ jobs:
             - name: Upload Grype SARIF
               if: always()
               # github/codeql-action v3.28.13
-              uses: github/codeql-action/upload-sarif@87557b9c84dde89fdd9b10e88954ac2f4248e463
+              uses: github/codeql-action/upload-sarif@8aad20d150bbac5944a9f9d289da16a4b0d87c1e
               with:
                   sarif_file: ${{ steps.grype.outputs.sarif }}
                   category: grype
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 19e542c..36e66e1 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -23,13 +23,13 @@ jobs:
 
             - name: Initialize CodeQL
               # github/codeql-action v3.28.13
-              uses: github/codeql-action/init@87557b9c84dde89fdd9b10e88954ac2f4248e463
+              uses: github/codeql-action/init@8aad20d150bbac5944a9f9d289da16a4b0d87c1e
               with:
                   languages: javascript-typescript
                   queries: security-extended
 
             - name: Analyze
               # github/codeql-action v3.28.13
-              uses: github/codeql-action/analyze@87557b9c84dde89fdd9b10e88954ac2f4248e463
+              uses: github/codeql-action/analyze@8aad20d150bbac5944a9f9d289da16a4b0d87c1e
               with:
                   category: /language:javascript-typescript
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index d174d19..dde9c79 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -39,6 +39,6 @@ jobs:
                   retention-days: 5
 
             - name: Upload to code scanning
-              uses: github/codeql-action/upload-sarif@87557b9c84dde89fdd9b10e88954ac2f4248e463
+              uses: github/codeql-action/upload-sarif@8aad20d150bbac5944a9f9d289da16a4b0d87c1e
               with:
                   sarif_file: results.sarif