diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 23dce4d4..4c472c38 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -276,7 +276,7 @@ jobs:
         run: cargo doc --no-deps --workspace --locked
 
       - name: Install cargo-nextest
-        uses: taiki-e/install-action@e67fa11c4b9316fa714ddf0abed07a0c3143b95b  # v2
+        uses: taiki-e/install-action@fa23953489c080190314742a9b907f8e97c6767c  # v2
         with:
           tool: cargo-nextest
 
@@ -331,7 +331,7 @@ jobs:
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1  # v7
 
       - name: Install cargo-audit
-        uses: taiki-e/install-action@e67fa11c4b9316fa714ddf0abed07a0c3143b95b  # v2
+        uses: taiki-e/install-action@fa23953489c080190314742a9b907f8e97c6767c  # v2
         with:
           tool: cargo-audit
 
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 73982687..914b8aaa 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -45,13 +45,13 @@ jobs:
       # check always reports a status.
       - name: Initialize CodeQL
         if: github.event.repository.visibility == 'public'
-        uses: github/codeql-action/init@cdf488f595d80d6e07e03d4674febd5ab45fa938  # v4
+        uses: github/codeql-action/init@b96794f015dfd88f77b49b1c93e0fa7110f94c63  # v4
         with:
           languages: ${{ matrix.language }}
           build-mode: ${{ matrix.build-mode }}
 
       - name: Perform CodeQL analysis
         if: github.event.repository.visibility == 'public'
-        uses: github/codeql-action/analyze@cdf488f595d80d6e07e03d4674febd5ab45fa938  # v4
+        uses: github/codeql-action/analyze@b96794f015dfd88f77b49b1c93e0fa7110f94c63  # v4
         with:
           category: "/language:${{ matrix.language }}"