diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index bb123c96..9e18e320 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -33,11 +33,11 @@ jobs:
                   persist-credentials: false
             # Neither language needs a build or dependency installation. Keep
             # untrusted PR code out of executable steps in this upload job.
-            - uses: github/codeql-action/init@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee # v4
+            - uses: github/codeql-action/init@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4
               with:
                   languages: ${{ matrix.language }}
                   build-mode: none
             # The default query suite is used for both languages.
-            - uses: github/codeql-action/analyze@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee # v4
+            - uses: github/codeql-action/analyze@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4
               with:
                   category: "/language:${{ matrix.language }}"