diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 2754d46d..aa9efe91 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -22,10 +22,10 @@ jobs:
     steps:
     - name: Checkout repository
       uses: actions/checkout@v6.0.2
-    - uses: github/codeql-action/init@v4.36.0
+    - uses: github/codeql-action/init@v4.36.2
       with:
         languages: ${{ matrix.language }}
     - name: Autobuild
-      uses: github/codeql-action/autobuild@v4.36.0
+      uses: github/codeql-action/autobuild@v4.36.2
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v4.36.0
+      uses: github/codeql-action/analyze@v4.36.2
diff --git a/.github/workflows/trivy-weekly.yml b/.github/workflows/trivy-weekly.yml
index 908ca827..9338dcf9 100644
--- a/.github/workflows/trivy-weekly.yml
+++ b/.github/workflows/trivy-weekly.yml
@@ -31,7 +31,7 @@ jobs:
           trivyignores: .trivyignore.yaml
 
       - name: Upload Trivy scan results to GitHub Security tab
-        uses: github/codeql-action/upload-sarif@v4.36.0
+        uses: github/codeql-action/upload-sarif@v4.36.2
         if: always()
         with:
           sarif_file: 'trivy-results.sarif'