diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 2da839a..5e78f9f 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -53,7 +53,7 @@
         IMAGE_NAME: ${{ github.repository }}
       steps:
         - name: Set up Docker Buildx
-          uses: docker/setup-buildx-action@d70bba72b1f3fd22344832f00baa16ece964efeb
+          uses: docker/setup-buildx-action@4fd812986e6c8c2a69e18311145f9371337f27d4
         - name: Log in to the Container registry
           uses: docker/login-action@0d4c9c5ea7693da7b068278f7b52bda2a190a446
           with:
@@ -63,7 +63,7 @@
         - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
         - name: Push Docker Image
           if: ${{ success() }}
-          uses: docker/build-push-action@15560696de535e4014efeff63c48f16952e52dd1
+          uses: docker/build-push-action@1a162644f9a7e87d8f4b053101d1d9a712edc18c
           with:
             context: .
             file: ./Dockerfile
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index 0c68758..130ed21 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -36,7 +36,7 @@ jobs:
           results_format: sarif
           publish_results: true
       - name: "Upload artifact"
-        uses: actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808 # v4.3.3
+        uses: actions/upload-artifact@0b2256b8c012f0828dc542b3febcab082c67f72b # v4.3.4
         with:
           name: SARIF file
           path: results.sarif