diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 4daf04f..c7a675a 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -56,7 +56,7 @@ jobs:
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@fdbfb4d2750291e159f0156def62b853c2798ca2 # v4
+      uses: github/codeql-action/init@fe4161a26a8629af62121b670040955b330f9af2 # v4
       with:
         languages: ${{ matrix.language }}
         build-mode: none
@@ -72,6 +72,6 @@ jobs:
         pip install -e .
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@fdbfb4d2750291e159f0156def62b853c2798ca2 # v4
+      uses: github/codeql-action/analyze@fe4161a26a8629af62121b670040955b330f9af2 # v4
       with:
         category: "/language:${{ matrix.language }}"
diff --git a/.github/workflows/zizmor.yml b/.github/workflows/zizmor.yml
index 29c73e7..79643ba 100644
--- a/.github/workflows/zizmor.yml
+++ b/.github/workflows/zizmor.yml
@@ -18,4 +18,4 @@ jobs:
         with:
           persist-credentials: false
       - name: Run zizmor
-        uses: zizmorcore/zizmor-action@b0e5c0b2b3785bc67b9b6c743fdbd495cda1b4c4
+        uses: zizmorcore/zizmor-action@c0e2b1c877e25a91d1d747c438d49199cad29698