diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 198ba019c..ac9891b02 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -85,13 +85,13 @@ jobs:
 
       - name: Initialize CodeQL
         if: steps.decide.outputs.analyze == 'true'
-        uses: github/codeql-action/init@87557b9c84dde89fdd9b10e88954ac2f4248e463 # v4.36.1
+        uses: github/codeql-action/init@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4.36.2
         with:
           languages: ${{ matrix.language }}
 
       - name: Perform CodeQL analysis
         if: steps.decide.outputs.analyze == 'true'
-        uses: github/codeql-action/analyze@87557b9c84dde89fdd9b10e88954ac2f4248e463 # v4.36.1
+        uses: github/codeql-action/analyze@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4.36.2
         with:
           category: "/language:${{ matrix.language }}"
 
@@ -126,7 +126,7 @@ jobs:
 
       - name: Upload empty SARIF
         if: steps.decide.outputs.analyze != 'true'
-        uses: github/codeql-action/upload-sarif@87557b9c84dde89fdd9b10e88954ac2f4248e463 # v4.36.1
+        uses: github/codeql-action/upload-sarif@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4.36.2
         with:
           sarif_file: empty.sarif
           category: "/language:${{ matrix.language }}"
diff --git a/.github/workflows/zizmor.yml b/.github/workflows/zizmor.yml
index 606d36c13..4911646ba 100644
--- a/.github/workflows/zizmor.yml
+++ b/.github/workflows/zizmor.yml
@@ -83,7 +83,7 @@ jobs:
 
       - name: Upload empty SARIF
         if: steps.decide.outputs.analyze != 'true'
-        uses: github/codeql-action/upload-sarif@87557b9c84dde89fdd9b10e88954ac2f4248e463 # v4.36.1
+        uses: github/codeql-action/upload-sarif@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4.36.2
         with:
           sarif_file: zizmor.sarif
           category: zizmor