diff --git a/.github/workflows/codeql-daily.yml b/.github/workflows/codeql-daily.yml
index 00707a85782ac..d89a3afaee4ed 100644
--- a/.github/workflows/codeql-daily.yml
+++ b/.github/workflows/codeql-daily.yml
@@ -26,7 +26,7 @@ jobs:
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@v1
+      uses: github/codeql-action/init@75f07e7ab2ee63cba88752d8c696324e4df67466
       # Override language selection by uncommenting this and choosing your languages
       with:
          languages: cpp
@@ -52,4 +52,4 @@ jobs:
         git clean -xdf
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v1
+      uses: github/codeql-action/analyze@75f07e7ab2ee63cba88752d8c696324e4df67466
diff --git a/.github/workflows/codeql-push.yml b/.github/workflows/codeql-push.yml
index 56254401e418f..b38360ecda945 100644
--- a/.github/workflows/codeql-push.yml
+++ b/.github/workflows/codeql-push.yml
@@ -34,7 +34,7 @@ jobs:
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@v1
+      uses: github/codeql-action/init@75f07e7ab2ee63cba88752d8c696324e4df67466
       # Override language selection by uncommenting this and choosing your languages
       with:
          languages: cpp
@@ -63,4 +63,4 @@ jobs:
 
     - name: Perform CodeQL Analysis
       if: env.BUILD_TARGETS != ''
-      uses: github/codeql-action/analyze@v1
+      uses: github/codeql-action/analyze@75f07e7ab2ee63cba88752d8c696324e4df67466
diff --git a/examples/cache/Dockerfile-service b/examples/cache/Dockerfile-service
index 9cb60da727aea..17174f7fbf57d 100644
--- a/examples/cache/Dockerfile-service
+++ b/examples/cache/Dockerfile-service
@@ -1,7 +1,7 @@
 FROM envoyproxy/envoy-alpine-dev:latest
 
-RUN apk update && apk add py3-pip bash curl
-RUN pip3 install -q Flask==0.11.1 requests==2.18.4 pyyaml
+RUN apk update && apk add py3-pip
+RUN pip3 install -q Flask==2.0.3 pyyaml
 RUN mkdir /code
 COPY ./start_service.sh /usr/local/bin/start_service.sh
 COPY ./service-envoy.yaml /etc/service-envoy.yaml
diff --git a/examples/cors/backend/Dockerfile-service b/examples/cors/backend/Dockerfile-service
index 0583e9c5846aa..da2fb5685af7e 100644
--- a/examples/cors/backend/Dockerfile-service
+++ b/examples/cors/backend/Dockerfile-service
@@ -1,7 +1,7 @@
 FROM envoyproxy/envoy-alpine-dev:latest
 
-RUN apk update && apk add py3-pip bash
-RUN pip3 install -q Flask==0.11.1
+RUN apk update && apk add py3-pip
+RUN pip3 install -q Flask==2.0.3
 RUN mkdir /code
 ADD ./service.py /code/
 ADD ./start_service.sh /usr/local/bin/start_service.sh
diff --git a/examples/cors/frontend/Dockerfile-service b/examples/cors/frontend/Dockerfile-service
index 31da7f6febf3d..2ebc1daa8911b 100644
--- a/examples/cors/frontend/Dockerfile-service
+++ b/examples/cors/frontend/Dockerfile-service
@@ -1,7 +1,7 @@
 FROM envoyproxy/envoy-alpine-dev:latest
 
-RUN apk update && apk add py3-pip bash
-RUN pip3 install -q Flask==0.11.1
+RUN apk update && apk add py3-pip
+RUN pip3 install -q Flask==2.0.3
 RUN mkdir /code
 ADD ./service.py ./index.html /code/
 ADD ./start_service.sh /usr/local/bin/start_service.sh
diff --git a/examples/csrf/crosssite/Dockerfile-service b/examples/csrf/crosssite/Dockerfile-service
index ed8cdfdfb5803..9f4270b3d2c3b 100644
--- a/examples/csrf/crosssite/Dockerfile-service
+++ b/examples/csrf/crosssite/Dockerfile-service
@@ -1,7 +1,7 @@
 FROM envoyproxy/envoy-alpine-dev:latest
 
-RUN apk update && apk add py3-pip bash
-RUN pip3 install -q Flask==0.11.1
+RUN apk update && apk add py3-pip
+RUN pip3 install -q Flask==2.0.3
 RUN mkdir /code
 ADD ./crosssite/service.py ./index.html /code/
 ADD ./start_service.sh /usr/local/bin/start_service.sh
diff --git a/examples/csrf/samesite/Dockerfile-service b/examples/csrf/samesite/Dockerfile-service
index 3a78e72af04e8..a469b87e10c2f 100644
--- a/examples/csrf/samesite/Dockerfile-service
+++ b/examples/csrf/samesite/Dockerfile-service
@@ -1,7 +1,7 @@
 FROM envoyproxy/envoy-alpine-dev:latest
 
-RUN apk update && apk add py3-pip bash
-RUN pip3 install -q Flask==0.11.1
+RUN apk update && apk add py3-pip
+RUN pip3 install -q Flask==2.0.3
 RUN mkdir /code
 ADD ./samesite/service.py ./index.html /code/
 ADD ./start_service.sh /usr/local/bin/start_service.sh
diff --git a/examples/double-proxy/Dockerfile-app b/examples/double-proxy/Dockerfile-app
index f843db1f8a53a..0e6f664dc63e5 100644
--- a/examples/double-proxy/Dockerfile-app
+++ b/examples/double-proxy/Dockerfile-app
@@ -1,7 +1,7 @@
 FROM python:3.8-alpine
 
 RUN apk update && apk add postgresql-dev gcc python3-dev musl-dev
-RUN pip3 install -q Flask==0.11.1 requests==2.18.4 psycopg2-binary
+RUN pip3 install -q Flask==2.0.3 requests==2.18.4 psycopg2-binary
 RUN mkdir /code
 ADD ./service.py /code
 ENTRYPOINT ["python3", "/code/service.py"]
diff --git a/examples/dynamic-config-cp/Dockerfile-control-plane b/examples/dynamic-config-cp/Dockerfile-control-plane
index 3c5bd17826ef5..c9e5ac48359b3 100644
--- a/examples/dynamic-config-cp/Dockerfile-control-plane
+++ b/examples/dynamic-config-cp/Dockerfile-control-plane
@@ -3,5 +3,5 @@ FROM golang
 RUN apt-get -y update && apt-get install -y -qq --no-install-recommends netcat
 RUN git clone https://github.com/envoyproxy/go-control-plane
 ADD ./resource.go /go/go-control-plane/internal/example/resource.go
-RUN cd go-control-plane && make bin/example
+RUN cd go-control-plane && git checkout b4adc3bb5fe5288bff01cd452dad418ef98c676e && make bin/example
 WORKDIR /go/go-control-plane
diff --git a/examples/ext_authz/upstream/service/Dockerfile b/examples/ext_authz/upstream/service/Dockerfile
index 5f70f40aca7c6..9cd53e82641de 100644
--- a/examples/ext_authz/upstream/service/Dockerfile
+++ b/examples/ext_authz/upstream/service/Dockerfile
@@ -1,5 +1,5 @@
 FROM python:3-alpine
 
-RUN pip3 install -q Flask==0.11.1
+RUN pip3 install -q Flask==2.0.3
 COPY . ./app
 CMD ["python3", "/app/service/server.py"]
diff --git a/examples/front-proxy/Dockerfile-jaeger-service b/examples/front-proxy/Dockerfile-jaeger-service
index 8c3fe1bd42761..e8bc362aca66a 100644
--- a/examples/front-proxy/Dockerfile-jaeger-service
+++ b/examples/front-proxy/Dockerfile-jaeger-service
@@ -1,7 +1,7 @@
-FROM envoyproxy/envoy-alpine-dev:latest
+FROM envoyproxy/envoy-dev:latest
 
-RUN apk update && apk add py3-pip bash curl
-RUN pip3 install -q Flask==0.11.1 requests==2.18.4
+RUN apt-get update && apt-get -q install --no-install-recommends -y python3-pip curl
+RUN pip3 install -q Flask==2.0.3 requests==2.18.4
 RUN mkdir /code
 ADD ./service.py /code
 ADD ./start_service.sh /usr/local/bin/start_service.sh
diff --git a/examples/front-proxy/Dockerfile-service b/examples/front-proxy/Dockerfile-service
index 0c2ae43024fa2..86fdf2b667b4a 100644
--- a/examples/front-proxy/Dockerfile-service
+++ b/examples/front-proxy/Dockerfile-service
@@ -1,7 +1,7 @@
-FROM envoyproxy/envoy-alpine-dev:latest
+FROM envoyproxy/envoy-dev:latest
 
-RUN apk update && apk add py3-pip bash curl
-RUN pip3 install -q Flask==0.11.1 requests==2.18.4
+RUN apt-get update && apt-get -q install --no-install-recommends -y python3-pip curl
+RUN pip3 install -q Flask==2.0.3 requests==2.18.4
 RUN mkdir /code
 ADD ./service.py /code
 ADD ./start_service.sh /usr/local/bin/start_service.sh
diff --git a/examples/load-reporting-service/Dockerfile-http-server b/examples/load-reporting-service/Dockerfile-http-server
index e71aa6b754686..cc1f983020b6b 100644
--- a/examples/load-reporting-service/Dockerfile-http-server
+++ b/examples/load-reporting-service/Dockerfile-http-server
@@ -1,11 +1,10 @@
 FROM envoyproxy/envoy-alpine-dev:latest
 
-RUN apk update && apk add py3-pip bash curl
+RUN apk update && apk add py3-pip
+RUN pip3 install -q Flask==2.0.3
 RUN mkdir /code
 ADD ./start_service.sh /usr/local/bin/start_service.sh
 COPY . ./code
 
-RUN pip3 install -q Flask==0.11.1
-
 RUN chmod u+x /usr/local/bin/start_service.sh
 ENTRYPOINT ["/bin/sh", "/usr/local/bin/start_service.sh"]