diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index e944737..974fc1b 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -61,7 +61,7 @@ jobs:
         if: ${{ inputs.disable-cache != true }}
 
       - name: Install cargo-auditable
-        uses: taiki-e/install-action@288875dd3d64326724fa6d9593062d9f8ba0b131 # ratchet:taiki-e/install-action@v2
+        uses: taiki-e/install-action@cfdb446e391c69574ebc316dfb7d7849ec12b940 # ratchet:taiki-e/install-action@v2
         with:
           tool: cargo-auditable
 
diff --git a/.github/workflows/check.yml b/.github/workflows/check.yml
index db951e5..9c6dd7f 100644
--- a/.github/workflows/check.yml
+++ b/.github/workflows/check.yml
@@ -59,7 +59,7 @@ jobs:
 
       - name: Upload Clippy results
         if: ${{ matrix.check == 'clippy' }}
-        uses: github/codeql-action/upload-sarif@9e907b5e64f6b83e7804b09294d44122997950d6 # ratchet:github/codeql-action/upload-sarif@v4
+        uses: github/codeql-action/upload-sarif@89a39a4e59826350b863aa6b6252a07ad50cf83e # ratchet:github/codeql-action/upload-sarif@v4
         with:
           sarif_file: result
           wait-for-processing: true