diff --git a/.github/workflows/reusable.codeql.yml b/.github/workflows/reusable.codeql.yml
index 69087ee..62453be 100644
--- a/.github/workflows/reusable.codeql.yml
+++ b/.github/workflows/reusable.codeql.yml
@@ -33,7 +33,7 @@ jobs:
 
       # Initialize CodeQL
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@28deaeda66b76a05916b6923827895f2b14ab387 # v3.28.16
+        uses: github/codeql-action/init@df559355d593797519d70b90fc8edd5db049e7a2 # v3.29.9
         with:
           languages: javascript
 
@@ -53,6 +53,6 @@ jobs:
 
       # Analyze CodeQL
       - name: Analyze CodeQL
-        uses: github/codeql-action/analyze@28deaeda66b76a05916b6923827895f2b14ab387 # v3.28.16
+        uses: github/codeql-action/analyze@df559355d593797519d70b90fc8edd5db049e7a2 # v3.29.9
         with:
           category: /language:javascript
diff --git a/.github/workflows/reusable.scorecard.yml b/.github/workflows/reusable.scorecard.yml
index c0db3ea..61becaf 100644
--- a/.github/workflows/reusable.scorecard.yml
+++ b/.github/workflows/reusable.scorecard.yml
@@ -52,6 +52,6 @@ jobs:
 
       # Upload to GitHub Code Scanning
       - name: Upload to GitHub Code Scanning
-        uses: github/codeql-action/upload-sarif@28deaeda66b76a05916b6923827895f2b14ab387 # v3.28.16
+        uses: github/codeql-action/upload-sarif@df559355d593797519d70b90fc8edd5db049e7a2 # v3.29.9
         with:
           sarif_file: ossf_scorecard.sarif