diff --git a/.github/workflows/codecoverage-main.yml b/.github/workflows/codecoverage-main.yml
index 9f77ec299..0b6ff9e16 100644
--- a/.github/workflows/codecoverage-main.yml
+++ b/.github/workflows/codecoverage-main.yml
@@ -71,7 +71,7 @@ jobs:
                   path: gh-pages
 
             - name: Install PHP
-              uses: shivammathur/setup-php@cf4cade2721270509d5b1c766ab3549210a39a2a # v2.33.0
+              uses: shivammathur/setup-php@20529878ed81ef8e78ddf08b480401e6101a850f # v2.35.3
               with:
                   php-version: ${{ matrix.php }}
                   coverage: xdebug
diff --git a/.github/workflows/lint-check-php.yml b/.github/workflows/lint-check-php.yml
index 38857954b..a5e6e75a2 100644
--- a/.github/workflows/lint-check-php.yml
+++ b/.github/workflows/lint-check-php.yml
@@ -26,7 +26,7 @@ jobs:
 
       # User PHP 7.4 here for compatibility with the WordPress codesniffer rules.
       - name: Setup PHP
-        uses: shivammathur/setup-php@cf4cade2721270509d5b1c766ab3549210a39a2a # v2.33.0
+        uses: shivammathur/setup-php@20529878ed81ef8e78ddf08b480401e6101a850f # v2.35.3
         with:
           php-version: '7.3'
           coverage: none