diff --git a/.github/workflows/reusable.codeql.yml b/.github/workflows/reusable.codeql.yml
index 69087ee..f1ad733 100644
--- a/.github/workflows/reusable.codeql.yml
+++ b/.github/workflows/reusable.codeql.yml
@@ -33,7 +33,7 @@ jobs:
 
       # Initialize CodeQL
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@28deaeda66b76a05916b6923827895f2b14ab387 # v3.28.16
+        uses: github/codeql-action/init@4e94bd11f71e507f7f87df81788dff88d1dacbfb # v4.31.0
         with:
           languages: javascript
 
@@ -53,6 +53,6 @@ jobs:
 
       # Analyze CodeQL
       - name: Analyze CodeQL
-        uses: github/codeql-action/analyze@28deaeda66b76a05916b6923827895f2b14ab387 # v3.28.16
+        uses: github/codeql-action/analyze@4e94bd11f71e507f7f87df81788dff88d1dacbfb # v4.31.0
         with:
           category: /language:javascript
diff --git a/.github/workflows/reusable.scorecard.yml b/.github/workflows/reusable.scorecard.yml
index c0db3ea..f2a4b1e 100644
--- a/.github/workflows/reusable.scorecard.yml
+++ b/.github/workflows/reusable.scorecard.yml
@@ -52,6 +52,6 @@ jobs:
 
       # Upload to GitHub Code Scanning
       - name: Upload to GitHub Code Scanning
-        uses: github/codeql-action/upload-sarif@28deaeda66b76a05916b6923827895f2b14ab387 # v3.28.16
+        uses: github/codeql-action/upload-sarif@4e94bd11f71e507f7f87df81788dff88d1dacbfb # v4.31.0
         with:
           sarif_file: ossf_scorecard.sarif