diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 945ed256841..3e1404b5794 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -28,11 +28,11 @@ jobs:
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@bdadc0358c357483ee5634b2327a9fa53facc1af # main
+        uses: github/codeql-action/init@2d7aeadbf01df0b0a833f218ff2eccfb1b5fc291 # main
         with:
             languages: ${{ matrix.language }}
             config-file: ./.github/codeql/codeql-config.yml
             tools: nightly
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@bdadc0358c357483ee5634b2327a9fa53facc1af # main
+        uses: github/codeql-action/analyze@2d7aeadbf01df0b0a833f218ff2eccfb1b5fc291 # main
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 8e255363e2a..4a7ec220175 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -111,7 +111,7 @@ jobs:
 
       - name: Upload ESLint results to Code Scanning
         if: "${{ !cancelled() && !startsWith(github.head_ref, 'dependabot/')}}"
-        uses: github/codeql-action/upload-sarif@bdadc0358c357483ee5634b2327a9fa53facc1af # main
+        uses: github/codeql-action/upload-sarif@2d7aeadbf01df0b0a833f218ff2eccfb1b5fc291 # main
         with:
           sarif_file: extensions/ql-vscode/build/eslint.sarif
           category: eslint