diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 282aea3e1..b77871b72 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -122,7 +122,7 @@ jobs:
       security-events: write
     steps:
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@v3
+        uses: github/codeql-action/init@v4.37.3
         with:
           languages: python
       - name: Checkout repository
@@ -139,4 +139,4 @@ jobs:
         run: uv sync --all-groups
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@v3
+        uses: github/codeql-action/analyze@v4.37.3