diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 922c581..52b28c2 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -23,13 +23,13 @@ jobs:
 
             - name: Initialize CodeQL
               # github/codeql-action v3.28.13
-              uses: github/codeql-action/init@458d36d7d4f47d0dd16ca424c1d3cda0060f1360
+              uses: github/codeql-action/init@9e0d7b8d25671d64c341c19c0152d693099fb5ba
               with:
                   languages: javascript-typescript
                   queries: security-extended
 
             - name: Analyze
               # github/codeql-action v3.28.13
-              uses: github/codeql-action/analyze@458d36d7d4f47d0dd16ca424c1d3cda0060f1360
+              uses: github/codeql-action/analyze@9e0d7b8d25671d64c341c19c0152d693099fb5ba
               with:
                   category: /language:javascript-typescript
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index 7fa68ca..9add235 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -39,6 +39,6 @@ jobs:
                   retention-days: 5
 
             - name: Upload to code scanning
-              uses: github/codeql-action/upload-sarif@bc0b696b4103f5fe60f15749af68a046868d511a
+              uses: github/codeql-action/upload-sarif@458d36d7d4f47d0dd16ca424c1d3cda0060f1360
               with:
                   sarif_file: results.sarif