diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index b1c894a35..6f4bb9b23 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -36,7 +36,7 @@ jobs:
     - name: Checkout repository
       uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@f6091c0113d1dcf9b98e269ee48e8a7e51b7bdd4 # v3.28.5
+      uses: github/codeql-action/init@dd746615b3b9d728a6a37ca2045b68ca76d4841a # v3.28.8
       with:
         languages: ${{ matrix.language }}
     - name: 'Configure'
@@ -47,6 +47,6 @@ jobs:
     - name: 'Build'
       run: cmake --build 'build' --verbose --parallel 4
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@f6091c0113d1dcf9b98e269ee48e8a7e51b7bdd4 # v3.28.5
+      uses: github/codeql-action/analyze@dd746615b3b9d728a6a37ca2045b68ca76d4841a # v3.28.8
       with:
         category: '/language:${{matrix.language}}'
diff --git a/.github/workflows/openssf_scorecard.yml b/.github/workflows/openssf_scorecard.yml
index d3a8df98c..2c27da736 100644
--- a/.github/workflows/openssf_scorecard.yml
+++ b/.github/workflows/openssf_scorecard.yml
@@ -40,6 +40,6 @@ jobs:
           path: results.sarif
           retention-days: 5
       - name: 'Upload Results'
-        uses: github/codeql-action/upload-sarif@f6091c0113d1dcf9b98e269ee48e8a7e51b7bdd4 # v3.28.5
+        uses: github/codeql-action/upload-sarif@dd746615b3b9d728a6a37ca2045b68ca76d4841a # v3.28.8
         with:
           sarif_file: results.sarif