diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 93e08cd..6429181 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -95,14 +95,14 @@ jobs:
 
       - name: Initialize CodeQL
         if: ${{ steps.selection.outputs.enabled == 'true' }}
-        uses: github/codeql-action/init@db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28 # v4.37.8
+        uses: github/codeql-action/init@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4.37.9
         with:
           languages: ${{ matrix.language }}
           build-mode: ${{ matrix.build_mode }}
 
       - name: Analyze
         if: ${{ steps.selection.outputs.enabled == 'true' }}
-        uses: github/codeql-action/analyze@db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28 # v4.37.8
+        uses: github/codeql-action/analyze@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4.37.9
         with:
           category: /language:${{ matrix.language }}
           output: artifacts/codeql/${{ matrix.language }}
diff --git a/.github/workflows/container-security.yml b/.github/workflows/container-security.yml
index 476b620..43c1d04 100644
--- a/.github/workflows/container-security.yml
+++ b/.github/workflows/container-security.yml
@@ -81,14 +81,14 @@ jobs:
 
       - name: Upload server findings to code scanning
         if: ${{ always() && hashFiles('artifacts/container-security/vyral-server.sarif') != '' && (github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository) }}
-        uses: github/codeql-action/upload-sarif@db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28 # v4.37.8
+        uses: github/codeql-action/upload-sarif@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4.37.9
         with:
           sarif_file: artifacts/container-security/vyral-server.sarif
           category: /container:vyral-server
 
       - name: Upload worker findings to code scanning
         if: ${{ always() && hashFiles('artifacts/container-security/execution-smoke-worker.sarif') != '' && (github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository) }}
-        uses: github/codeql-action/upload-sarif@db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28 # v4.37.8
+        uses: github/codeql-action/upload-sarif@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4.37.9
         with:
           sarif_file: artifacts/container-security/execution-smoke-worker.sarif
           category: /container:execution-smoke-worker