diff --git a/.github/workflows/claude.yml b/.github/workflows/claude.yml
index 7d3951a..6d298d5 100644
--- a/.github/workflows/claude.yml
+++ b/.github/workflows/claude.yml
@@ -56,7 +56,7 @@ jobs:
       - name: Run Claude Code
         id: claude
         if: steps.mode.outputs.is_review != 'true'
-        uses: anthropics/claude-code-action@9db594c7a0e82298c121c18b7f08aa1579ce7341 # v1.0.185
+        uses: anthropics/claude-code-action@56cf60fde42f7b19c3abfd5c9c48b69a1288461f # v1.0.222
         with:
           claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }} # zizmor: ignore[secrets-outside-env]
           use_commit_signing: true
@@ -66,7 +66,7 @@ jobs:
       - name: Run Claude Code Review
         id: claude-review
         if: steps.mode.outputs.is_review == 'true'
-        uses: anthropics/claude-code-action@9db594c7a0e82298c121c18b7f08aa1579ce7341 # v1.0.185
+        uses: anthropics/claude-code-action@56cf60fde42f7b19c3abfd5c9c48b69a1288461f # v1.0.222
         with:
           claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }} # zizmor: ignore[secrets-outside-env]
           allowed_bots: 'renovate[bot],dependabot[bot]'
diff --git a/.github/workflows/security-alerts.yml b/.github/workflows/security-alerts.yml
index 42d040c..fa75806 100644
--- a/.github/workflows/security-alerts.yml
+++ b/.github/workflows/security-alerts.yml
@@ -147,7 +147,7 @@ jobs:
 
       - name: Sweep security alerts
         if: steps.alerts.outputs.has_alerts == 'true'
-        uses: anthropics/claude-code-action@9db594c7a0e82298c121c18b7f08aa1579ce7341 # v1.0.185
+        uses: anthropics/claude-code-action@56cf60fde42f7b19c3abfd5c9c48b69a1288461f # v1.0.222
         with:
           claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }} # zizmor: ignore[secrets-outside-env]
           use_commit_signing: true