diff --git a/.github/workflows/reusable.codeql.yml b/.github/workflows/reusable.codeql.yml
index 69087ee..65ffaf0 100644
--- a/.github/workflows/reusable.codeql.yml
+++ b/.github/workflows/reusable.codeql.yml
@@ -33,7 +33,7 @@ jobs:
 
       # Initialize CodeQL
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@28deaeda66b76a05916b6923827895f2b14ab387 # v3.28.16
+        uses: github/codeql-action/init@f443b600d91635bebf5b0d9ebc620189c0d6fba5 # v4.30.8
         with:
           languages: javascript
 
@@ -53,6 +53,6 @@ jobs:
 
       # Analyze CodeQL
       - name: Analyze CodeQL
-        uses: github/codeql-action/analyze@28deaeda66b76a05916b6923827895f2b14ab387 # v3.28.16
+        uses: github/codeql-action/analyze@f443b600d91635bebf5b0d9ebc620189c0d6fba5 # v4.30.8
         with:
           category: /language:javascript
diff --git a/.github/workflows/reusable.scorecard.yml b/.github/workflows/reusable.scorecard.yml
index c0db3ea..a0f665b 100644
--- a/.github/workflows/reusable.scorecard.yml
+++ b/.github/workflows/reusable.scorecard.yml
@@ -52,6 +52,6 @@ jobs:
 
       # Upload to GitHub Code Scanning
       - name: Upload to GitHub Code Scanning
-        uses: github/codeql-action/upload-sarif@28deaeda66b76a05916b6923827895f2b14ab387 # v3.28.16
+        uses: github/codeql-action/upload-sarif@f443b600d91635bebf5b0d9ebc620189c0d6fba5 # v4.30.8
         with:
           sarif_file: ossf_scorecard.sarif