diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml
index 23ae923..79297d9 100644
--- a/.github/workflows/security.yml
+++ b/.github/workflows/security.yml
@@ -45,12 +45,12 @@ jobs:
           persist-credentials: false
 
       - name: 'Setup CodeQL'
-        uses: github/codeql-action/init@23acc5c183826b7a8a97bce3cecc52db901f8251 # v3.25.10
+        uses: github/codeql-action/init@afb54ba388a7dca6ecae48f608c4ff05ff4cc77a # v3.25.15
         with:
           languages: ${{ matrix.language }}
 
       - name: 'Run analysis'
-        uses: github/codeql-action/analyze@23acc5c183826b7a8a97bce3cecc52db901f8251 # v3.25.10
+        uses: github/codeql-action/analyze@afb54ba388a7dca6ecae48f608c4ff05ff4cc77a # v3.25.15
         with:
           category: '/language:${{ matrix.language }}'
 
@@ -80,6 +80,6 @@ jobs:
           publish_results: true
 
       - name: 'Upload to code-scanning'
-        uses: github/codeql-action/upload-sarif@23acc5c183826b7a8a97bce3cecc52db901f8251 # v3.25.10
+        uses: github/codeql-action/upload-sarif@afb54ba388a7dca6ecae48f608c4ff05ff4cc77a # v3.25.15
         with:
           sarif_file: scoreboard.sarif
\ No newline at end of file