diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index a2c9318..185f51b 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -28,7 +28,7 @@ jobs:
         go-version-file: 'go.mod'
 
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4
+      uses: github/codeql-action/init@24c54180a607b1449ed407dd24f251e4e9147c8d # v4
       with:
         languages: go
         queries: security-extended
@@ -37,6 +37,6 @@ jobs:
       run: go build -buildvcs=false ./...
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4
+      uses: github/codeql-action/analyze@24c54180a607b1449ed407dd24f251e4e9147c8d # v4
       with:
         category: "/language:go"
diff --git a/action.yml b/action.yml
index 3ddc36c..8a3b5f6 100644
--- a/action.yml
+++ b/action.yml
@@ -201,7 +201,7 @@ runs:
 
     - name: Save the baseline
       if: steps.scan.outputs.upload == 'true'
-      uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+      uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
       with:
         name: ${{ inputs.baseline-artifact }}
         path: ${{ runner.temp }}/subenum-out/results.jsonl