diff --git a/.github/workflows/sast.yml b/.github/workflows/sast.yml
index 9f0bc21..562ba11 100644
--- a/.github/workflows/sast.yml
+++ b/.github/workflows/sast.yml
@@ -37,7 +37,7 @@ jobs:
                   name: "SARIF file"
                   path: "results.sarif"
                   retention-days: 5
-            - uses: "github/codeql-action/upload-sarif@1c5b675653bb5c22dbe9b12b556ec555138e09fd"
+            - uses: "github/codeql-action/upload-sarif@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2"
               with:
                   sarif_file: "results.sarif"
 
@@ -51,7 +51,7 @@ jobs:
 
         steps:
             - uses: "actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1"
-            - uses: "github/codeql-action/init@1c5b675653bb5c22dbe9b12b556ec555138e09fd"
+            - uses: "github/codeql-action/init@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2"
               with:
                   languages: "typescript"
             - uses: "pnpm/action-setup@ea17c68df8912ef543352723c149a84f56e3d413"
@@ -62,4 +62,4 @@ jobs:
                   node-version-file: ".nvmrc"
                   cache: "pnpm"
             - run: "make install"
-            - uses: "github/codeql-action/analyze@1c5b675653bb5c22dbe9b12b556ec555138e09fd"
+            - uses: "github/codeql-action/analyze@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2"