diff --git a/.github/workflows/sync-zizmor-versions.yml b/.github/workflows/sync-zizmor-versions.yml
index 228bdd4..eb7fba1 100644
--- a/.github/workflows/sync-zizmor-versions.yml
+++ b/.github/workflows/sync-zizmor-versions.yml
@@ -24,7 +24,7 @@ jobs:
           persist-credentials: false
 
       - name: Install uv
-        uses: astral-sh/setup-uv@bec219d24cd3e171d82865faccec33120bb574f4 # v10.1.0
+        uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
         with:
           version: "0.12.15"
 
diff --git a/action.yml b/action.yml
index 4833ac2..8c8ddcf 100644
--- a/action.yml
+++ b/action.yml
@@ -128,7 +128,7 @@ runs:
       shell: bash
 
     - name: Upload SARIF file to GitHub Advanced Security
-      uses: github/codeql-action/upload-sarif@b96794f015dfd88f77b49b1c93e0fa7110f94c63 # v4.38.0
+      uses: github/codeql-action/upload-sarif@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2
       if: ${{ inputs.advanced-security == 'true' }}
       with:
         sarif_file: ${{ steps.run-zizmor.outputs.sarif-file }}