diff --git a/.github/workflows/golangci-lint.yml b/.github/workflows/golangci-lint.yml
index f9ecdd12..d8b1b5fb 100644
--- a/.github/workflows/golangci-lint.yml
+++ b/.github/workflows/golangci-lint.yml
@@ -50,7 +50,7 @@ jobs:
           cache: true
 
       - name: golangci-lint
-        uses: golangci/golangci-lint-action@a4f60bb28d35aeee14e6880718e0c85ff1882e64 # v3.7.1
+        uses: golangci/golangci-lint-action@aaa42aa0628b4ae2578232a66b541047968fac86 # v3.7.1
         with:
           version: latest
           only-new-issues: true
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index 022f7baa..fa5a3ad1 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -89,6 +89,6 @@ jobs:
 
       # Upload the results to GitHub's code scanning dashboard.
       - name: Upload to code-scanning
-        uses: github/codeql-action/upload-sarif@23acc5c183826b7a8a97bce3cecc52db901f8251 # v3.25.10
+        uses: github/codeql-action/upload-sarif@4dd16135b69a43b6c8efb853346f8437d92d3c93 # v3.26.6
         with:
           sarif_file: results.sarif
diff --git a/.github/workflows/terratest.yml b/.github/workflows/terratest.yml
index f9442240..18677f16 100644
--- a/.github/workflows/terratest.yml
+++ b/.github/workflows/terratest.yml
@@ -42,7 +42,7 @@ jobs:
           cache: true
 
       - name: Install Terraform
-        uses: hashicorp/setup-terraform@651471c36a6092792c552e8b1bef71e592b462d8 # v3.1.1
+        uses: hashicorp/setup-terraform@b9cd54a3c349d3f38e8881555d616ced269862dd # v3.1.2
         with:
           terraform_version: 1.9
           terraform_wrapper: false
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 1bfd7873..d7ec1747 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -132,7 +132,7 @@ jobs:
           cache: true
 
       - name: Install Terraform ${{ matrix.terraform_version }}
-        uses: hashicorp/setup-terraform@651471c36a6092792c552e8b1bef71e592b462d8 # v3.1.1
+        uses: hashicorp/setup-terraform@b9cd54a3c349d3f38e8881555d616ced269862dd # v3.1.2
         with:
           terraform_version: ${{ matrix.terraform_version }}
           terraform_wrapper: false
diff --git a/.github/workflows/trufflehog.yml b/.github/workflows/trufflehog.yml
index 29ef4229..26b1ae9e 100644
--- a/.github/workflows/trufflehog.yml
+++ b/.github/workflows/trufflehog.yml
@@ -42,7 +42,7 @@ jobs:
           fetch-depth: 0
 
       - name: Check secrets with TruffleHog OSS
-        uses: trufflesecurity/trufflehog@fe5624c70923355128868cffd647b6e2cfe11443 # v3.81.9
+        uses: trufflesecurity/trufflehog@06bbd6fd493fcac4a6db0e4850a92bcf932fafed # v3.81.10
         with:
           path: ./
           head: HEAD
diff --git a/.github/workflows/update-on-push.yml b/.github/workflows/update-on-push.yml
index b9eb4495..f0465a39 100644
--- a/.github/workflows/update-on-push.yml
+++ b/.github/workflows/update-on-push.yml
@@ -36,7 +36,7 @@ jobs:
             registry.npmjs.org:443
 
       - name: Install Node.js
-        uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4.0.2
+        uses: actions/setup-node@1e60f620b9541d16bece96c5465dc8ee9832be0b # v4.0.3
         with:
           node-version: "20"
           token: ${{ secrets.GITHUB_TOKEN }}