diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index 79bf363..b81bf11 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -92,7 +92,7 @@ jobs:
             uploads.github.com:443
 
       - name: Download SARIF artifact
-        uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3  # v8.0.0
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c  # v8.0.1
         with:
           name: scorecard-sarif
 
diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml
index 1fccf05..6dfed44 100644
--- a/.github/workflows/security.yml
+++ b/.github/workflows/security.yml
@@ -51,7 +51,7 @@ jobs:
           persist-credentials: false
 
       - name: Dependency Review
-        uses: actions/dependency-review-action@05fe4576374b728f0c523d6a13d64c25081e0803 # v4.7.1
+        uses: actions/dependency-review-action@2031cfc080254a8a887f58cffee85186f0e49e48 # v4.7.1
         with:
           config-file: .github/dependency-review-config.yml