diff --git a/.github/workflows/actionlint.yaml b/.github/workflows/actionlint.yaml
index 840e3bd2..e83dea00 100644
--- a/.github/workflows/actionlint.yaml
+++ b/.github/workflows/actionlint.yaml
@@ -58,7 +58,7 @@ jobs:
                     persist-credentials: false
 
             -   name: "Check workflow files with zizmor"
-                uses: zizmorcore/zizmor-action@6fc4b006235f201fdab3722e17240ab420d580e5 # v0.6.1
+                uses: zizmorcore/zizmor-action@3dc1ecc9bcb9e94e9b2c709687979e1298497054 # v0.6.2
 
             -   name: "Check workflow files with poutine"
                 uses: boostsecurityio/poutine-action@e240ebd3eff8b2db5a8e5f6b28f58739d7db2247 # v1.1.4
@@ -66,7 +66,7 @@ jobs:
                     output: ${{ runner.temp }}/poutine.sarif
 
             -   name: "Upload poutine SARIF file"
-                uses: github/codeql-action/upload-sarif@f205ea1c3313d32999d8d6a48b4f6530d4437b38 # v4.37.4
+                uses: github/codeql-action/upload-sarif@d1ba80a13dd99fba24a470575428917156a28b43 # v4.37.5
                 with:
                     sarif_file: ${{ runner.temp }}/poutine.sarif
                     category: poutine