diff --git a/.github/workflows/deploy-s3.yml b/.github/workflows/deploy-s3.yml
index 54c946b61b..73efbbb420 100644
--- a/.github/workflows/deploy-s3.yml
+++ b/.github/workflows/deploy-s3.yml
@@ -175,7 +175,7 @@ jobs:
           echo "✅ Removed node_modules (excluded from S3 sync regardless, removed for cleanliness)"
 
       - name: configure aws credentials
-        uses: aws-actions/configure-aws-credentials@cbe3b392738ccf3f987d68400dafcf4b0624a56c # v6.2.4
+        uses: aws-actions/configure-aws-credentials@e1253824e5c10ff9df46874f81ed3ec929e19cfd # v6.3.0
         with:
           role-to-assume: arn:aws:iam::172017021075:role/GithubWorkFlowRole
           role-session-name: githubworkflowrolesessiont2
diff --git a/.github/workflows/test-and-report.yml b/.github/workflows/test-and-report.yml
index 35568c90c1..6d3929e233 100644
--- a/.github/workflows/test-and-report.yml
+++ b/.github/workflows/test-and-report.yml
@@ -196,7 +196,7 @@ jobs:
           npm run test:coverage
 
       - name: Upload coverage reports to Codecov
-        uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v5.3.1
+        uses: codecov/codecov-action@0b35c9ecc4f0529d0eb674914510c22f85b196b4 # v5.3.1
         with:
           files: ./coverage/lcov.info
           flags: unittests