diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 3e1404b5794..551f4993d02 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -28,11 +28,11 @@ jobs:
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@2d7aeadbf01df0b0a833f218ff2eccfb1b5fc291 # main
+        uses: github/codeql-action/init@0911ee96d2d6c8def97122c36c5cadd93829a4b4 # main
         with:
             languages: ${{ matrix.language }}
             config-file: ./.github/codeql/codeql-config.yml
             tools: nightly
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@2d7aeadbf01df0b0a833f218ff2eccfb1b5fc291 # main
+        uses: github/codeql-action/analyze@0911ee96d2d6c8def97122c36c5cadd93829a4b4 # main
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 4a7ec220175..f698d89a7c7 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -111,7 +111,7 @@ jobs:
 
       - name: Upload ESLint results to Code Scanning
         if: "${{ !cancelled() && !startsWith(github.head_ref, 'dependabot/')}}"
-        uses: github/codeql-action/upload-sarif@2d7aeadbf01df0b0a833f218ff2eccfb1b5fc291 # main
+        uses: github/codeql-action/upload-sarif@0911ee96d2d6c8def97122c36c5cadd93829a4b4 # main
         with:
           sarif_file: extensions/ql-vscode/build/eslint.sarif
           category: eslint