diff --git a/.github/workflows/checks.yaml b/.github/workflows/checks.yaml
index 35ec078c9..10b5ea4b7 100644
--- a/.github/workflows/checks.yaml
+++ b/.github/workflows/checks.yaml
@@ -331,7 +331,7 @@ jobs:
 
       - name: save benchmark results as a step summary
         if: github.event_name != 'pull_request' || github.event.pull_request.head.repo.fork
-        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
+        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
         with:
           script: |
             const fs = require('fs');
@@ -354,7 +354,7 @@ jobs:
           persist-credentials: false
 
       - name: save benchmark results as a comment
-        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
+        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
         with:
           script: |
             const decisionOutput = process.env.BENCHMARK_MARKDOWN;
diff --git a/.github/workflows/friendly-reminders.yaml b/.github/workflows/friendly-reminders.yaml
index 9e1259170..091d10379 100644
--- a/.github/workflows/friendly-reminders.yaml
+++ b/.github/workflows/friendly-reminders.yaml
@@ -32,7 +32,7 @@ jobs:
 
       - name: Post comment if go.mod was changed
         if: steps.go-mod-tidy.outputs.stdout != ''
-        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
+        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
         with:
           script: |
             github.issues.createComment({
diff --git a/.github/workflows/label.yaml b/.github/workflows/label.yaml
index 875017317..1765a90ce 100644
--- a/.github/workflows/label.yaml
+++ b/.github/workflows/label.yaml
@@ -46,7 +46,7 @@ jobs:
           app-id: ${{ secrets.APP_ID }}
           private-key: ${{ secrets.AUTOMATION_KEY }}
       - name: Check Author Association and Label PR
-        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
+        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
         with:
           github-token: ${{ steps.generate-token.outputs.token }}
           script: |
diff --git a/.github/workflows/traffic.yaml b/.github/workflows/traffic.yaml
index c86b930c9..e9b97a434 100644
--- a/.github/workflows/traffic.yaml
+++ b/.github/workflows/traffic.yaml
@@ -39,7 +39,7 @@ jobs:
         run: echo "DATE=$(date +'%Y%m%d')" >>"$GITHUB_OUTPUT"
 
       - name: Get Traffic
-        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
+        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
         id: get-traffic
         env:
           OWNER: opentdf