diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index f53e162..9c44b56 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -45,7 +45,7 @@ jobs:
         go-version-file: go.mod
         cache: false
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@1fc58d04a4d4374f921bdac573c3811c240f9c26 # v4
+      uses: github/codeql-action/init@33d7b85da1a04171e211befe2c739303b9a4c066 # v4
       with:
         languages: ${{ matrix.language }}
         build-mode: ${{ matrix.build-mode }}
@@ -58,6 +58,6 @@ jobs:
           CGO_ENABLED=0 GOOS="$target" GOARCH=amd64 go build -a -mod=readonly ./...
         done
     - name: Upload CodeQL results
-      uses: github/codeql-action/analyze@1fc58d04a4d4374f921bdac573c3811c240f9c26 # v4
+      uses: github/codeql-action/analyze@33d7b85da1a04171e211befe2c739303b9a4c066 # v4
       with:
         category: /language:${{ matrix.language }}