diff --git a/.github/workflows/research-vuln-scan.yml b/.github/workflows/research-vuln-scan.yml
index 24c75fa..3932fe3 100644
--- a/.github/workflows/research-vuln-scan.yml
+++ b/.github/workflows/research-vuln-scan.yml
@@ -36,7 +36,7 @@ jobs:
           TRIVY_PASSWORD: ${{ secrets.GREENBONE_REGISTRY_READ_TOKEN }}
 
       - name: Upload Trivy scan results to GitHub Security tab
-        uses: github/codeql-action/upload-sarif@cf1bb45a277cb3c205638b2cd5c984db1c46a412 # v3.29.5
+        uses: github/codeql-action/upload-sarif@1b168cd39490f61582a9beae412bb7057a6b2c4e # v3.29.5
         with:
           sarif_file: 'trivy-results.sarif'
           category: ${{ github.jobs[github.job].name }}
@@ -60,7 +60,7 @@ jobs:
           password: ${{ secrets.GREENBONE_REGISTRY_READ_TOKEN }}
 
       - name: Run the Anchore Grype scan action
-        uses: anchore/scan-action@40a61b52209e9d50e87917c5b901783d546b12d0
+        uses: anchore/scan-action@3c9a191a0fbab285ca6b8530b5de5a642cba332f
         id: grype
         with:
           image: '${{ vars.GREENBONE_REGISTRY }}/opensight/opensight-postgres:16'
@@ -68,7 +68,7 @@ jobs:
           severity-cutoff: medium
 
       - name: Upload grype vulnerability report
-        uses: github/codeql-action/upload-sarif@cf1bb45a277cb3c205638b2cd5c984db1c46a412 # v3.29.5
+        uses: github/codeql-action/upload-sarif@1b168cd39490f61582a9beae412bb7057a6b2c4e # v3.29.5
         with:
           sarif_file: ${{ steps.grype.outputs.sarif }}
           category: ${{ github.jobs[github.job].name }}
@@ -108,7 +108,7 @@ jobs:
       - name: Upload docker scout SARIF result
         id: upload-sarif
         if: ${{ github.event_name != 'pull_request_target' }}
-        uses: github/codeql-action/upload-sarif@cf1bb45a277cb3c205638b2cd5c984db1c46a412 # v3.29.5
+        uses: github/codeql-action/upload-sarif@1b168cd39490f61582a9beae412bb7057a6b2c4e # v3.29.5
         with:
           sarif_file: sarif.output.json
           category: ${{ github.jobs[github.job].name }}