diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 1649bdb..ee4700d 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -40,14 +40,14 @@ jobs:
           cache: true
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 # v4.37.0
+        uses: github/codeql-action/init@7188fc363630916deb702c7fdcf4e481b751f97a # v4.37.1
         with:
           languages: go
           build-mode: autobuild
 
       - name: Analyze
         id: analyze
-        uses: github/codeql-action/analyze@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 # v4.37.0
+        uses: github/codeql-action/analyze@7188fc363630916deb702c7fdcf4e481b751f97a # v4.37.1
         with:
           output: codeql-results
           upload: never
@@ -89,7 +89,7 @@ jobs:
           echo "path=$sarif_file" >> "$GITHUB_OUTPUT"
 
       - name: Upload CodeQL SARIF
-        uses: github/codeql-action/upload-sarif@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 # v4.37.0
+        uses: github/codeql-action/upload-sarif@7188fc363630916deb702c7fdcf4e481b751f97a # v4.37.1
         with:
           sarif_file: ${{ steps.sarif.outputs.path }}
           category: codeql-go
diff --git a/.github/workflows/osv-scanner.yml b/.github/workflows/osv-scanner.yml
index 5263580..114e79f 100644
--- a/.github/workflows/osv-scanner.yml
+++ b/.github/workflows/osv-scanner.yml
@@ -82,7 +82,7 @@ jobs:
           path: artifacts/osv
 
       - name: Upload OSV SARIF
-        uses: github/codeql-action/upload-sarif@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 # v4.37.0
+        uses: github/codeql-action/upload-sarif@7188fc363630916deb702c7fdcf4e481b751f97a # v4.37.1
         with:
           sarif_file: artifacts/osv/osv-results.sarif
           category: osv-source-advisory
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index ad02b5f..971df68 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -65,7 +65,7 @@ jobs:
           path: artifacts/scorecard
 
       - name: Upload Scorecard SARIF
-        uses: github/codeql-action/upload-sarif@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 # v4.37.0
+        uses: github/codeql-action/upload-sarif@7188fc363630916deb702c7fdcf4e481b751f97a # v4.37.1
         with:
           sarif_file: artifacts/scorecard/scorecard-results.sarif
           category: scorecard-repository-hygiene