diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index f6cff49f759..930d44793cb 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -28,11 +28,11 @@ jobs:
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@e0b52dbdc5c3376dd8cb78e956fd23fa07ca2c5b # main
+        uses: github/codeql-action/init@7a6e2f798f401f9e1febf447764fca5bedb6cf66 # main
         with:
             languages: ${{ matrix.language }}
             config-file: ./.github/codeql/codeql-config.yml
             tools: nightly
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@e0b52dbdc5c3376dd8cb78e956fd23fa07ca2c5b # main
+        uses: github/codeql-action/analyze@7a6e2f798f401f9e1febf447764fca5bedb6cf66 # main
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 5c01491562e..a0a28c64b7d 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -111,7 +111,7 @@ jobs:
 
       - name: Upload ESLint results to Code Scanning
         if: "${{ !cancelled() && !startsWith(github.head_ref, 'dependabot/')}}"
-        uses: github/codeql-action/upload-sarif@e0b52dbdc5c3376dd8cb78e956fd23fa07ca2c5b # main
+        uses: github/codeql-action/upload-sarif@7a6e2f798f401f9e1febf447764fca5bedb6cf66 # main
         with:
           sarif_file: extensions/ql-vscode/build/eslint.sarif
           category: eslint