diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 028fb5cc8..7639c7b16 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -35,7 +35,7 @@ jobs:
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@7d9249f5a57288b8a472ddd9cc3ece1921f7dc38 # v4.37.3
+        uses: github/codeql-action/init@d97b3428e8eebbb1810cf454d6397886d136b4ba # v4.37.3
         with:
           languages: go
           # xref: https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/configuring-code-scanning#using-queries-in-ql-packs
@@ -52,6 +52,6 @@ jobs:
           make install
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@7d9249f5a57288b8a472ddd9cc3ece1921f7dc38 # v4.37.3
+        uses: github/codeql-action/analyze@d97b3428e8eebbb1810cf454d6397886d136b4ba # v4.37.3
         with:
           category: "/language:go"