diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 7c8eb9d8..793d6bfd 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -43,7 +43,7 @@ jobs:
 
       - name: Initialize CodeQL
         # github/codeql-action/init@v4.35.3
-        uses: github/codeql-action/init@68bde559dea0fdcac2102bfdf6230c5f70eb485e
+        uses: github/codeql-action/init@5595ccaf912efad79be6eef63a5619ff05969be3
         with:
           languages: ${{ matrix.language }}
           build-mode: manual
@@ -53,6 +53,6 @@ jobs:
 
       - name: Perform CodeQL Analysis
         # github/codeql-action/analyze@v4.35.3
-        uses: github/codeql-action/analyze@68bde559dea0fdcac2102bfdf6230c5f70eb485e
+        uses: github/codeql-action/analyze@5595ccaf912efad79be6eef63a5619ff05969be3
         with:
           category: "/language:${{ matrix.language }}"
diff --git a/.github/workflows/release-artifacts.yml b/.github/workflows/release-artifacts.yml
index aa0d0a8c..03ac7f8a 100644
--- a/.github/workflows/release-artifacts.yml
+++ b/.github/workflows/release-artifacts.yml
@@ -243,14 +243,14 @@ jobs:
       - name: Attest release JAR provenance
         if: steps.resolve-release.outputs.release_publish == 'true'
         # actions/attest@v4.1.0
-        uses: actions/attest@59d89421af93a897026c735860bf21b6eb4f7b26
+        uses: actions/attest@1e69f48acb82d1966a394da916b4c1698aa569d6
         with:
           subject-path: release-artifacts/LoadBalancerPro-${{ env.RELEASE_VERSION }}.jar
 
       - name: Attest release JAR SBOM
         if: steps.resolve-release.outputs.release_publish == 'true'
         # actions/attest@v4.1.0
-        uses: actions/attest@59d89421af93a897026c735860bf21b6eb4f7b26
+        uses: actions/attest@1e69f48acb82d1966a394da916b4c1698aa569d6
         with:
           subject-path: release-artifacts/LoadBalancerPro-${{ env.RELEASE_VERSION }}.jar
           sbom-path: release-artifacts/LoadBalancerPro-${{ env.RELEASE_VERSION }}-bom.json