diff --git a/.github/workflows/governance-audit.yml b/.github/workflows/governance-audit.yml
index c3049c3..5a2da25 100644
--- a/.github/workflows/governance-audit.yml
+++ b/.github/workflows/governance-audit.yml
@@ -95,7 +95,7 @@ jobs:
           persist-credentials: false
 
       - name: Audit workflow security
-        uses: zizmorcore/zizmor-action@3dc1ecc9bcb9e94e9b2c709687979e1298497054 # v0.6.2
+        uses: zizmorcore/zizmor-action@70fb788f84895a7701f5643d103d587e460b5c99 # v0.6.3
         with:
           version: 1.29.0
           collect: all
diff --git a/.github/workflows/reusable-pages.yml b/.github/workflows/reusable-pages.yml
index 0f3d4f0..9e06b2d 100644
--- a/.github/workflows/reusable-pages.yml
+++ b/.github/workflows/reusable-pages.yml
@@ -98,6 +98,6 @@ jobs:
 
       - name: Deploy Pages artifact
         id: deployment
-        uses: actions/deploy-pages@cd2ce8fcbc39b97be8ca5fce6e763baed58fa128 # v5.0.0
+        uses: actions/deploy-pages@368f82528645a54fb793d4d04e342629a3f51346 # v5.0.1
         with:
           artifact_name: github-pages
diff --git a/.github/workflows/reusable-supply-chain.yml b/.github/workflows/reusable-supply-chain.yml
index 8e452ba..6f1d26b 100644
--- a/.github/workflows/reusable-supply-chain.yml
+++ b/.github/workflows/reusable-supply-chain.yml
@@ -81,7 +81,7 @@ jobs:
           persist-credentials: false
 
       - name: Audit GitHub Actions
-        uses: zizmorcore/zizmor-action@3dc1ecc9bcb9e94e9b2c709687979e1298497054 # v0.6.2
+        uses: zizmorcore/zizmor-action@70fb788f84895a7701f5643d103d587e460b5c99 # v0.6.3
         with:
           version: 1.29.0
           collect: workflows