diff --git a/.github/workflows/codeql-scanning.yml b/.github/workflows/codeql-scanning.yml
index 136070d8..9ce1a90b 100644
--- a/.github/workflows/codeql-scanning.yml
+++ b/.github/workflows/codeql-scanning.yml
@@ -22,11 +22,11 @@ jobs:
           java-version: '25'
           distribution: 'temurin'
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@89a39a4e59826350b863aa6b6252a07ad50cf83e # v4.32.4
+        uses: github/codeql-action/init@0d579ffd059c29b07949a3cce3983f0780820c98 # v4.32.6
         with:
           languages: java
           queries: security-and-quality
       - name: Autobuild
-        uses: github/codeql-action/autobuild@89a39a4e59826350b863aa6b6252a07ad50cf83e # v4.32.4
+        uses: github/codeql-action/autobuild@0d579ffd059c29b07949a3cce3983f0780820c98 # v4.32.6
       - name: Perform analysis
-        uses: github/codeql-action/analyze@89a39a4e59826350b863aa6b6252a07ad50cf83e # v4.32.4
+        uses: github/codeql-action/analyze@0d579ffd059c29b07949a3cce3983f0780820c98 # v4.32.6
diff --git a/.github/workflows/semgrep-scanning.yml b/.github/workflows/semgrep-scanning.yml
index 94336e36..4a988942 100644
--- a/.github/workflows/semgrep-scanning.yml
+++ b/.github/workflows/semgrep-scanning.yml
@@ -31,6 +31,6 @@ jobs:
             --output semgrep-java-scan.sarif
 
       - name: Upload SARIF to Code Scanning
-        uses: github/codeql-action/upload-sarif@89a39a4e59826350b863aa6b6252a07ad50cf83e # 4.32.4
+        uses: github/codeql-action/upload-sarif@0d579ffd059c29b07949a3cce3983f0780820c98 # 4.32.6
         with:
           sarif_file: semgrep-java-scan.sarif