diff --git a/.github/workflows/codecoverage-main.yml b/.github/workflows/codecoverage-main.yml
index 0b6ff9e16..29be174b4 100644
--- a/.github/workflows/codecoverage-main.yml
+++ b/.github/workflows/codecoverage-main.yml
@@ -71,7 +71,7 @@ jobs:
                   path: gh-pages
 
             - name: Install PHP
-              uses: shivammathur/setup-php@20529878ed81ef8e78ddf08b480401e6101a850f # v2.35.3
+              uses: shivammathur/setup-php@ec406be512d7077f68eed36e63f4d91bc006edc4 # v2.35.4
               with:
                   php-version: ${{ matrix.php }}
                   coverage: xdebug
diff --git a/.github/workflows/lint-check-php.yml b/.github/workflows/lint-check-php.yml
index c9b393bb0..6b630a90d 100644
--- a/.github/workflows/lint-check-php.yml
+++ b/.github/workflows/lint-check-php.yml
@@ -26,7 +26,7 @@ jobs:
 
       # User PHP 7.4 here for compatibility with the WordPress codesniffer rules.
       - name: Setup PHP
-        uses: shivammathur/setup-php@20529878ed81ef8e78ddf08b480401e6101a850f # v2.35.3
+        uses: shivammathur/setup-php@ec406be512d7077f68eed36e63f4d91bc006edc4 # v2.35.4
         with:
           php-version: '7.3'
           coverage: none