diff --git a/.github/workflows/run-code-ql.yaml b/.github/workflows/run-code-ql.yaml
index 3ab53ce305..6da63e67f4 100644
--- a/.github/workflows/run-code-ql.yaml
+++ b/.github/workflows/run-code-ql.yaml
@@ -31,7 +31,7 @@ jobs:
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@cdefb33c0f6224e58673d9004f47f7cb3e328b89
+        uses: github/codeql-action/init@19b2f06db2b6f5108140aeb04014ef02b648f789
         with:
           languages: ${{ matrix.language }}
 
@@ -55,7 +55,7 @@ jobs:
         run: pnpm install --frozen-lockfile
 
       - name: Perform CodeQL analysis
-        uses: github/codeql-action/analyze@cdefb33c0f6224e58673d9004f47f7cb3e328b89
+        uses: github/codeql-action/analyze@19b2f06db2b6f5108140aeb04014ef02b648f789
         with:
           category: /language:${{ matrix.language }}
     timeout-minutes: 5