diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index bee78d1..4fdb939 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -28,10 +28,10 @@ jobs:
       - name: "Checkout"
         uses: "actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29"
       - name: "Initialize CodeQL"
-        uses: "github/codeql-action/init@9fdb3e49720b44c48891d036bb502feb25684276"
+        uses: "github/codeql-action/init@f079b8493333aace61c81488f8bd40919487bd9f"
         with:
           languages: "${{ matrix.language }}"
       - name: "Autobuild"
-        uses: "github/codeql-action/autobuild@9fdb3e49720b44c48891d036bb502feb25684276"
+        uses: "github/codeql-action/autobuild@f079b8493333aace61c81488f8bd40919487bd9f"
       - name: "Perform CodeQL Analysis"
-        uses: "github/codeql-action/analyze@9fdb3e49720b44c48891d036bb502feb25684276"
+        uses: "github/codeql-action/analyze@f079b8493333aace61c81488f8bd40919487bd9f"
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index 368497a..69cd5b9 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -28,6 +28,6 @@ jobs:
           repo_token: "${{ secrets.GITHUB_TOKEN }}"
           publish_results: false
       - name: "Upload SARIF file"
-        uses: "github/codeql-action/upload-sarif@9fdb3e49720b44c48891d036bb502feb25684276"
+        uses: "github/codeql-action/upload-sarif@f079b8493333aace61c81488f8bd40919487bd9f"
         with:
           sarif_file: "./results.sarif"